CVE-2022-37703

In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists or not anywhere in the fs. The binary will use opendir() as root directly without checking the path, letting the attacker provide an arbitrary path.

References

Affected packages

Git / github.com/zmanda/amanda

Affected ranges

Type: GIT
Repo: https://github.com/zmanda/amanda
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

60032f14aeefe63d2b92e01496667315430c5923

Affected versions

subtag-2.*

subtag-2.6.0.beta1

subtag-2.6.0.beta2

subtag-3.*

subtag-3.5

subtag-3.5.1

subtag-community-3.*

subtag-community-3.5

subtag-community-3.5.1

tag-2.*

tag-2.5.2

tag-2.5.2.beta1

tag-2.5.x-perl

tag-2.6.0

tag-2.6.0.beta2

tag-2.6.1

tag-3.*

tag-3.1.x

tag-3.2.0.beta1

tag-3.2.x

tag-3.3.x

tag-3.4.x

tag-3.5-github-master

tag-3.5.1.internal

tag-3.5.rel

tag-3.5.x

tag-community-3.*

tag-community-3.5

tag-community-3.5.1

tag-community-3.5.2

tag-core-3.*

tag-core-3.6.rel