Privilege Escalation Vulnerability in Amanda Package
Summary
DEBIAN-CVE-2022-37705: A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. Affects amanda versions < 1:3.5.1-7+deb11u1. Fixed in 1:3.5.1-7+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Amanda is an open-source backup solution that enables users to set up a single master backup server to back up multiple hosts. It is widely used for its flexibility and ability to handle various backup types. However, a vulnerability has been identified in version 3.5.1 of Amanda, which poses a significant security risk by allowing unauthorized privilege escalation.
Vulnerability Detail
A privilege escalation flaw was discovered in Amanda 3.5.1, where the backup user can gain root privileges. This vulnerability arises from the runtar SUID program, which is designed to execute the /usr/bin/tar command with specific arguments. The flaw occurs because the program mishandles the arguments passed to the tar binary, allowing attackers to exploit the argument parsing mechanism. This could lead to unauthorized access and control over the system, making it critical to address.
How To Fix
Minimum fixed version
1:3.5.1-7+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade amandaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the runtar program or disable its SUID bit until the package is updated. This can be done using the command: sudo chmod u-s /path/to/runtar
Conclusion
The privilege escalation vulnerability in the Amanda package poses a serious risk to system security. Users are strongly advised to update to the patched versions to mitigate this risk. Temporary workarounds can be implemented while awaiting updates.
See every vulnerability recorded for amanda →
FAQ
The vulnerability allows a backup user to escalate their privileges to root, potentially compromising the entire system.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Versions prior to the patched releases (1:3.5.1-7+deb11u1 for Debian 11 and 1:3.5.1-10 for Debian 12, 13, and 14) are affected.
Yes, you can restrict access to the runtar program or disable its SUID bit as a temporary measure.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-37705.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for amanda.
