Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director without knowledge of the shared secret if the director allows client initiated connection and connects to the client itself. The malicious client can replay the Bareos director's cram-md5 challenge to the director itself leading to the director responding to the replayed challenge. The response obtained is then a valid reply to the directors original challenge. This is fixed in version 19.2.8.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director     without knowledge of the shared secret if the director allows client initiated connection and connects to     the client itself. The malicious client can replay the Bareos director's cram-md5 challenge to the     director itself leading to the director responding to the replayed challenge. The response obtained is     then a valid reply to the directors original challenge. This is fixed in version 19.2.8. (CVE-2020-4042)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director
    without knowledge of the shared secret if the director allows client initiated connection and connects to
    the client itself. The malicious client can replay the Bareos director's cram-md5 challenge to the
    director itself leading to the director responding to the replayed challenge. The response obtained is
    then a valid reply to the directors original challenge. This is fixed in version 19.2.8. (CVE-2020-4042)

  - In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a
    malicious client to corrupt the director's memory via oversized digest strings sent during initialization
    of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos
    versions 19.2.8, 18.2.9 and 17.2.10. (CVE-2020-11061)

ID	Name	Product	Family	Severity
262952	Linux Distros Unpatched Vulnerability : CVE-2020-4042	Nessus	Misc.	medium
403620	Alpine: multiple bareos packages: security update to 19.2.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
403620	Alpine: multiple bareos packages: security update to 19.2.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2020-4042

medium

Tenable Plugins

medium

high

high