CVE-2002-0901 Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certai...
HighCVSS 10.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amanda | = 2.3.0.4 | No fix listed |
| debian/amanda(Debian:12) | < 2.4.0b6-1 | 2.4.0b6-1 |
| debian/amanda(Debian:13) | < 2.4.0b6-1 | 2.4.0b6-1 |
| debian/amanda(Debian:14) | < 2.4.0b6-1 | 2.4.0b6-1 |
References
- 20020527 AMANDA security issues mailing-list
- amanda-amindexd-bo(9181) patch vdb-entry vendor-advisory
- amanda-operator-bo(9182) patch vdb-entry vendor-advisory
- 4836 patch vdb-entry vendor-advisory
- 4840 patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-0901 vendor-advisory