CVE-2009-3611
- State
- Published
- Severity
- Not scored
- Published
- Oct 26, 2009
- Updated
- Aug 7, 2024
- Reserved
- Oct 9, 2009
Description
common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785
- http://bugs.gentoo.org/show_bug.cgi?id=289047
- http://ftp.debian.org/debian/pool/main/b/backintime/backintime_0.9.26-3.diff.gz
- [oss-security] 20091014 Re: CVE Request - backintimemailing-list
- FEDORA-2009-9282vendor-advisory
- [oss-security] 20091014 CVE Request - backintimemailing-list
- https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256
- https://bugzilla.redhat.com/show_bug.cgi?id=520210
- FEDORA-2009-9298vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.