ST
Vendor
Storebackup
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-7040 | ST Storebackup Storebackup | 8.1 | Jan 21 | storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation |
| CVE-2005-3146 | ST Storebackup Storebackup | – | Oct 5 | StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files |
| CVE-2005-3147 | ST Storebackup Storebackup | – | Oct 5 | StoreBackup before 1.19 creates the backup root with world-readable permissions, which allows local users to obtain sensitive information |
| CVE-2005-3148 | ST Storebackup Storebackup | – | Oct 5 | StoreBackup before 1.19 does not properly set the uid and guid for symbolic links (1) that are backed up by storeBackup.pl, or (2) recovered by storeBackupRecover.pl, which could… |