Bacula: Information disclosure

Bacula: Information disclosure A vulnerability in Bacula may allow remote attackers to obtain sensitive information. bacula 2014-05-17 2014-05-17: 1 434878 remote 5.2.12 5.2.12

Bacula is a network based backup suite.

Bacula does not properly enforce console access control lists.

A remote authenticated attacker may be able to bypass restrictions to obtain sensitive information.

There is no known workaround at this time.

All Bacula users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=app-backup/bacula-5.2.12"

CVE-2012-4430 craig ackle