CVE-2009-3611

NameCVE-2009-3611
Descriptioncommon/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs543785

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
backintime (PTS)buster1.1.24-0.1fixed
bullseye1.2.1-3fixed
bookworm1.3.3-4fixed
sid, trixie1.4.3-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
backintimesource(unstable)0.9.26-3543785

Search for package or bug name: Reporting problems