Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2016-10729: Amanda 3.3.1 lets backup user run commands as root
CVE-2016-10729 · published 8 years ago
Summary
In Amanda version 3.3.1, a tool used for restoring backups runs with full system privileges but does not verify extra input. A user who already has permission to perform backups can add hidden arguments and cause the program to execute any command as the system administrator. Restrict backup‑only accounts or upgrade/remove the vulnerable component to stop this risk.
What to do
- Update debian amanda to version 1:3.3.9-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | amanda |
< 1:3.3.9-1 Fix: upgrade to 1:3.3.9-1
|
| Debian:13 | debian | amanda |
< 1:3.3.9-1 Fix: upgrade to 1:3.3.9-1
|
| – | zmanda | amanda |
3.3.1 cpe:2.3:a:zmanda:amanda:3.3.1:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux |
7.0 cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
| – | debian | debian_linux |
7.0 8.0 9.0 10.0 cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* |
Original advisory text
An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments suppli...
An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate commands and perform command injection as root.
References
- https://security-tracker.debian.org/tracker/CVE-2016-10729 Vendor Advisory
- https://www.exploit-db.com/exploits/39217/ Exploit Third Party Advisory VDB Entry
Severity
7.8
High
Type
CWE-77Command Injection
Timeline
Published24 Oct 2018
Updated4 Nov 2026
First seen22 Sep 2026
Track software like this
Free during beta