CVE-2012-4430
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce...
CVE-2012-4430 is a medium vulnerability (CVSS 4.0) in Bacula, published October 8, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.68%, the 86th percentile. Fixed in bacula 5.2.6+dfsg-4.
- Severity
- 4.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.68%EPSS, 86th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
5.2.6+dfsg-4bacula +3 more
Description
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
- Record
CVE-2012-4430- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
- Record
CVE-2012-4430- Updated
- 2026-11-02
EUVDEUVD-2012-4365No score
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
- Record
EUVD-2012-4365- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v4qv-fcmj-64w9No score
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce...
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
- Record
GHSA-v4qv-fcmj-64w9- Updated
- 2026-11-02
OSVNo score
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
- Record
CVE-2012-4430- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4430No score
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors.
- Record
DEBIAN-CVE-2012-4430- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
sourceforge.net/projects/bacula/files/bacula/5.2.12/ReleaseNotes/view
debian.org/security/2012/dsa-2558
openwall.com/lists/oss-security/2012/09/15/2
mandriva.com/security/advisories?name=MDVSA-2012:166
bacula.org/en?page=news
securityfocus.com/bid/55505
Show 8 moreShow less
secunia.com/advisories/50535
nvd.nist.gov/vuln/detail/CVE-2012-4430
github.com/advisories/GHSA-v4qv-fcmj-64w9
security-tracker.debian.org/tracker/CVE-2012-4430