Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi.

Updated backuppc packages fix security vulnerabilities :

Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi (CVE-2011-5081).

Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to index.cgi, related to the log file viewer (CVE-2011-4923).

Also, This update package corrects/improves the definition of variables in config.pl, the configuration file of backuppc: the variables SshPath, SmbClientPath, NmbLookupPath, TarClientPath, TopDir. As a result, backuppc should now run with the default values installed by the Mageia package, modifications of config.pl should only be required for defining site-specific settings.

- cleanup build macros for Fedora

    - fix deprecated qw messages (partial fix for bz       #755076)

    - CVE-2011-5081 BackupPC: XSS flaw in RestoreFile.pm (bz       #795017, #795018, #795019)

  - Broken configuration for httpd 2.4 (bz #871353)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that BackupPC did not properly sanitize its input when processing RestoreFile error messages, resulting in a cross-site scripting (XSS) vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
66076	Mandriva Linux Security Advisory : backuppc (MDVSA-2013:062)	Nessus	Mandriva Local Security Checks	medium
63500	Fedora 18 : BackupPC-3.2.1-10.fc18 (2012-20943)	Nessus	Fedora Local Security Checks	medium
63394	Fedora 17 : BackupPC-3.2.1-10.fc17 (2012-20968)	Nessus	Fedora Local Security Checks	medium
59187	Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : backuppc vulnerability (USN-1444-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2011-5081

medium

Tenable Plugins

medium

medium

medium

medium