storebackup records

4 published records for vendor storebackup.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
33Monitor	CVE-2020-7040No exploit	storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to pstorebackup · storebackup · CWE-59 Pre-auth	High8.1	—	2.8%	Jan 21, 2020
18Monitor	CVE-2005-3148No exploit	StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recoveredstorebackup · storebackup	Medium4.6	—	0.3%	Oct 5, 2005
8Monitor	CVE-2005-3147No exploit	StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.storebackup · storebackup	Low2.1	—	0.3%	Oct 5, 2005
8Monitor	CVE-2005-3146No exploit	StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files.storebackup · storebackup	Low2.1	—	0.3%	Oct 5, 2005

CVE-2020-7040
33Monitor
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to p
HighCVSS 8.1No exploitEPSS 2%
- Pre-auth
storebackup · storebackupJan 21, 2020
CVE-2005-3148
18Monitor
StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered
MediumCVSS 4.6No exploitEPSS 0%
storebackup · storebackupOct 5, 2005
CVE-2005-3147
8Monitor
StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information.
LowCVSS 2.1No exploitEPSS 0%
storebackup · storebackupOct 5, 2005
CVE-2005-3146
8Monitor
StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files.
LowCVSS 2.1No exploitEPSS 0%
storebackup · storebackupOct 5, 2005