Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Summary
Title BackupPC vulnerabilities
Informations
Name USN-1249-1 First vendor Publication 2011-10-27
Vendor Ubuntu Last vendor Modification 2011-10-27
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score 4.3 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.10 - Ubuntu 10.04 LTS - Ubuntu 8.04 LTS

Summary:

BackupPC could be made to expose sensitive information over the network.

Software Description: - backuppc: high-performance, enterprise-grade system for backing up PCs

Details:

It was discovered that BackupPC did not properly sanitize its input when processing backup browser error messages, resulting in a cross-site scripting (XSS) vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. This issue did not affect Ubuntu 11.10. (CVE-2011-3361)

Jamie Strandboge discovered that BackupPC did not properly sanitize its input when processing log file viewer error messages, resulting in cross-site scripting (XSS) vulnerabilities.

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 11.10:
backuppc 3.2.1-1ubuntu1.1

Ubuntu 11.04:
backuppc 3.2.0-3ubuntu4.2

Ubuntu 10.10:
backuppc 3.1.0-9ubuntu2.2

Ubuntu 10.04 LTS:
backuppc 3.1.0-9ubuntu1.2

Ubuntu 8.04 LTS:
backuppc 3.0.0-4ubuntu1.3

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1249-1
CVE-2011-3361

Package Information:
https://launchpad.net/ubuntu/+source/backuppc/3.2.1-1ubuntu1.1
https://launchpad.net/ubuntu/+source/backuppc/3.2.0-3ubuntu4.2
https://launchpad.net/ubuntu/+source/backuppc/3.1.0-9ubuntu2.2
https://launchpad.net/ubuntu/+source/backuppc/3.1.0-9ubuntu1.2
https://launchpad.net/ubuntu/+source/backuppc/3.0.0-4ubuntu1.3

Original Source

Url : http://www.ubuntu.com/usn/USN-1249-1

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-79 Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:17277
 
Oval ID: oval:org.mitre.oval:def:17277
Title: USN-1249-1 -- backuppc vulnerabilites
Description: BackupPC could be made to expose sensitive information over the network.
Family: unix Class: patch
Reference(s): USN-1249-1
CVE-2011-3361
 Version: 7
Platform(s): Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04
Ubuntu 8.04
 Product(s): backuppc
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 4

OpenVAS Exploits

Date Description
2012-04-04 Name : BackupPC 'index.cgi' Multiple Cross Site Scripting Vulnerabilities
File : nvt/gb_backuppc_index_mult_xss_vuln.nasl
2012-04-02 Name : Fedora Update for BackupPC FEDORA-2012-0825
File : nvt/gb_fedora_2012_0825_BackupPC_fc16.nasl
2012-02-03 Name : Fedora Update for BackupPC FEDORA-2012-0826
File : nvt/gb_fedora_2012_0826_BackupPC_fc15.nasl
2011-10-31 Name : Ubuntu Update for backuppc USN-1249-1
File : nvt/gb_ubuntu_USN_1249_1.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
72054 BackupPC index.cgi num Parameter XSS

BackupPC contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'num' parameter upon submission to the index.cgi script before returning it to the 'Browse.pm' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

Nessus® Vulnerability Scanner

Date Description
2013-04-20 Name : The remote Mandriva Linux host is missing a security update.
File : mandriva_MDVSA-2013-062.nasl - Type : ACT_GATHER_INFO
2012-02-02 Name : The remote Fedora host is missing a security update.
File : fedora_2012-0825.nasl - Type : ACT_GATHER_INFO
2012-02-02 Name : The remote Fedora host is missing a security update.
File : fedora_2012-0826.nasl - Type : ACT_GATHER_INFO
2011-10-28 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1249-1.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
Date Informations
2014-02-17 11:59:11
  • Multiple Updates