AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.

The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6614-1 advisory.

  - AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument     checking for runtar.c, a different vulnerability than CVE-2022-37705. (CVE-2023-30577)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the amanda packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument     checking for runtar.c, a different vulnerability than CVE-2022-37705. (CVE-2023-30577)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3681 advisory.

  - In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can     abuse this vulnerability to know if a directory exists or not anywhere in the fs. The binary will use     `opendir()` as root directly without checking the path, letting the attacker provide an arbitrary path.
    (CVE-2022-37703)

  - A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root     privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar     with specific arguments that are controllable by the attacker. This program mishandles the arguments     passed to tar binary (it expects that the argument name and value are separated with a space; however,     separating them with an equals sign is also supported), (CVE-2022-37705)

  - AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument     checking for runtar.c, a different vulnerability than CVE-2022-37705. (CVE-2023-30577)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of amanda installed on the remote host is prior to 3.3.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2218 advisory.

  - An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client     installation. The runtar setuid root binary does not check for additional arguments supplied after
    --create, allowing users to manipulate commands and perform command injection as root. (CVE-2016-10729)

  - An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client     installation. Amstar is an Amanda Application API script. It should not be run by users directly. It uses     star to backup and restore data. It runs binaries with root permissions when parsing the command line     argument --star-path. (CVE-2016-10730)

  - AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument     checking for runtar.c, a different vulnerability than CVE-2022-37705. (CVE-2023-30577)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of amanda installed on the remote host is prior to 2.6.1p2-8.14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1808 advisory.

  - An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client     installation. The runtar setuid root binary does not check for additional arguments supplied after
    --create, allowing users to manipulate commands and perform command injection as root. (CVE-2016-10729)

  - AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument     checking for runtar.c, a different vulnerability than CVE-2022-37705. (CVE-2023-30577)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-566e354e4a advisory.

  - AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument     checking for runtar.c, a different vulnerability than CVE-2022-37705. (CVE-2023-30577)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-4db1d56125 advisory.

  - AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument     checking for runtar.c, a different vulnerability than CVE-2022-37705. (CVE-2023-30577)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0206-1 advisory.

  - AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument     checking for runtar.c, a different vulnerability than CVE-2022-37705. (CVE-2023-30577)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0205-1 advisory.

  - AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument     checking for runtar.c, a different vulnerability than CVE-2022-37705. (CVE-2023-30577)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
189777	Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.10 : amanda vulnerability (USN-6614-1)	Nessus	Ubuntu Local Security Checks	high
188404	EulerOS 2.0 SP8 : amanda (EulerOS-SA-2023-3112)	Nessus	Huawei Local Security Checks	high
186524	Debian DLA-3681-1 : amanda - LTS security update	Nessus	Debian Local Security Checks	high
180092	Amazon Linux 2 : amanda (ALAS-2023-2218)	Nessus	Amazon Linux Local Security Checks	high
180081	Amazon Linux AMI : amanda (ALAS-2023-1808)	Nessus	Amazon Linux Local Security Checks	high
179380	Fedora 37 : amanda (2023-566e354e4a)	Nessus	Fedora Local Security Checks	high
179377	Fedora 38 : amanda (2023-4db1d56125)	Nessus	Fedora Local Security Checks	high
179374	openSUSE 15 Security Update : amanda (openSUSE-SU-2023:0206-1)	Nessus	SuSE Local Security Checks	high
179373	openSUSE 15 Security Update : amanda (openSUSE-SU-2023:0205-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2023-30577

high

Tenable Plugins

high

high

high

high

high

high

high

high

high