Bacula: Information disclosure A vulnerability in Bacula may allow remote attackers to obtain sensitive information. bacula 2014-05-17 2014-05-17 434878 remote 5.2.12 5.2.12

Bacula is a network based backup suite.

Bacula does not properly enforce console access control lists.

A remote authenticated attacker may be able to bypass restrictions to obtain sensitive information.

There is no known workaround at this time.

All Bacula users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=app-backup/bacula-5.2.12" CVE-2012-4430 craig ackle