Vulnerabilities > Bacula > Bacula > 1.38.11
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2012-10-10 | CVE-2012-4430 | Permissions, Privileges, and Access Controls vulnerability in multiple products The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors. | 4.0 |
2007-10-23 | CVE-2007-5626 | Cleartext Transmission of Sensitive Information vulnerability in Bacula make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network. | 5.5 |