Vulnerabilities

AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges.

Amanda 3.5.1 allows privilege escalation from the regular user backup to root.

In Zmanda Management Console 3.3.9, ZMC_Admin_Advanced?form=adminTasks&action=Apply&command= allows CSRF, as demonstrated by command injection with shell metacharacters.

An issue was discovered in Amanda 3.3.1.

An issue was discovered in Amanda 3.3.1.