Privilege Escalation Vulnerability in Amanda Package
Summary
CVE-2022-37705: A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. Affects amanda across 2 version ranges.
< 1:3.5.1-7+deb11u1
< 60032f14aeefe63d2b92e01496667315430c5923
Fixed in 1:3.5.1-7+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Amanda is an open-source backup solution that enables users to set up a single master backup server to back up multiple hosts. It is widely used in various environments due to its flexibility and capability to handle different types of storage media. However, a critical vulnerability has been identified in version 3.5.1, which allows a backup user to gain root privileges through improper handling of arguments in the runtar SUID program.
Vulnerability Detail
The vulnerability, identified as CVE-2022-37705, arises from the runtar SUID program that serves as a wrapper for executing the /usr/bin/tar command. The flaw lies in the way the program processes arguments; it incorrectly allows an attacker to manipulate the arguments passed to the tar binary. Specifically, the program expects a space to separate argument names and values but also accepts an equals sign, which can be exploited to escalate privileges. This could lead to unauthorized access and control over the system, posing a significant security risk.
How To Fix
Minimum fixed version
1:3.5.1-7+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade amandaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can remove the SUID bit from the runtar program to prevent privilege escalation until the package can be updated. This can be done using the following command:
sudo chmod u-s /usr/bin/runtar
Conclusion
The privilege escalation vulnerability in the Amanda package poses a serious risk to systems using this backup solution. It is crucial for users to upgrade to the latest secure versions to protect against potential exploitation. Additionally, temporary workarounds can help mitigate risks until a proper fix is applied.
See every vulnerability recorded for amanda →
FAQ
CVE-2022-37705 is a privilege escalation vulnerability in the Amanda backup software that allows a backup user to gain root privileges.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
If exploited, this vulnerability could allow an attacker to gain unauthorized root access, compromising the entire system and its data.
If immediate upgrading is not possible, consider removing the SUID bit from the runtar program as a temporary measure to mitigate the risk.
The CVSS score for CVE-2022-37705 is 6.7, indicating a medium severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for amanda.
