Approved changes feed: RSS · Atom
cpe:2.3:a:bacula:bacula:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bacula (6d7623bb-b305-57e1-8540-bea1da774c35) |
|---|---|
| Product | Bacula (1babe707-03e0-5c98-9812-d1e5fcf8d0be) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/bacula |
purl2cpe | 2026-06-01 10:18:13.542532 |
pkg:deb/ubuntu/bacula |
purl2cpe | 2026-06-01 10:18:13.542535 |
pkg:github/naszaklasa/bacula |
purl2cpe | 2026-06-01 10:18:13.542538 |
pkg:gitlab/redhat/bacula |
purl2cpe | 2026-06-01 10:18:13.542541 |
pkg:rpm/fedora/bacula |
purl2cpe | 2026-06-01 10:18:13.542543 |
pkg:rpm/opensuse/bacula |
purl2cpe | 2026-06-01 10:18:13.542546 |
pkg:sourceforge/bacula |
purl2cpe | 2026-06-01 10:18:13.542549 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-4430 |
vulnerable | 2026-06-08 05:02:17.497295 |
Details available
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
Published: 2012-10-10T18:00:00.000Z
Updated: 2024-08-06T20:35:09.743Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5626 |
vulnerable | 2026-06-08 04:50:06.543386 |
Details available
make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network.
Published: 2007-10-23T16:00:00.000Z
Updated: 2024-08-07T15:39:13.531Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2995 |
vulnerable | 2026-06-08 04:48:31.093679 |
Details available
bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autoconf/randpass when openssl is not available, or (2) the mtx.[PID] temporary file in mtx-changer.in.
Published: 2005-09-20T04:00:00.000Z
Updated: 2024-08-07T22:53:30.282Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.