CVE-2009-3611

NameCVE-2009-3611
Descriptioncommon/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitylow
Debian Bugs543785

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
backintime (PTS)jessie1.0.36-1+deb8u1fixed
stretch1.1.12-2fixed
buster1.1.24-0.1fixed
bullseye, sid1.2.1-2fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
backintimesource(unstable)0.9.26-3543785

Search for package or bug name: Reporting problems