CVE-2012-4430

The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.

• CWE-264

• http://secunia.com/advisories/50535Third Party Advisory
• http://secunia.com/advisories/50808Third Party Advisory
• http://sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/viewThird Party Advisory
• http://www.bacula.org/en/?page=newsVendor Advisory
• http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905Patch, Vendor Advisory
• http://www.debian.org/security/2012/dsa-2558Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:166Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/09/14/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/09/14/12Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/09/15/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/55505Third Party Advisory, VDB Entry
• http://secunia.com/advisories/50535Third Party Advisory
• http://secunia.com/advisories/50808Third Party Advisory
• http://sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/viewThird Party Advisory
• http://www.bacula.org/en/?page=newsVendor Advisory
• http://www.bacula.org/git/cgit.cgi/bacula/commit/?id=67debcecd3d530c429e817e1d778e79dcd1db905Patch, Vendor Advisory
• http://www.debian.org/security/2012/dsa-2558Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2012:166Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/09/14/11Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/09/14/12Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/09/15/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/55505Third Party Advisory, VDB Entry

Published

Oct 10, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4424Stack-based buffer overflow in string/strcoll_l.c in the GNU…
• CVE-2012-4425libgio, when used in setuid or other privileged programs in …
• CVE-2012-4426Multiple format string vulnerabilities in mcrypt 2.6.8 and e…
• CVE-2012-4427The gnome-shell plugin 3.4.1 in GNOME allows remote attacker…
• CVE-2012-4428openslp: SLPIntersectStringList()' Function has a DoS vulner…7.5
• CVE-2012-4429Vino 2.28, 2.32, 3.4.2, and earlier allows remote attackers …
• CVE-2012-4431org/apache/catalina/filters/CsrfPreventionFilter.java in Apa…
• CVE-2012-4432Use-after-free vulnerability in opngreduc.c in OptiPNG Hg an…
• CVE-2012-4433Multiple integer overflows in operations/external/ppm-load.c…
• CVE-2012-4434fwknop before 2.0.3 allow remote authenticated users to caus…8.8
• CVE-2012-4435fwknop before 2.0.3 does not properly validate IP addresses,…
• CVE-2012-4436Buffer overflow in the run_last_args function in client/fwkn…