VULNERABILITY INTELLIGENCE

CVE-2009-3611

CVSS score7.1 HIGH
EPSS probability0.30%
CISA KEVNot currently listed
Published2009-10-26
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

common/snapshots.py in Back In Time (aka backintime) 0.9.26 changes certain permissions to 0777 before deleting the files in an old backup snapshot, which allows local users to obtain sensitive information by reading these files, or interfere with backup integrity by modifying files that are shared across snapshots.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references