{"vulnerability": "cve-2016-10729", "sightings": [{"uuid": "d90c1503-2ae4-47e7-bd51-5b3efadaf3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2016-10729", "type": "seen", "source": "https://t.me/cibsecurity/841", "content": "ATENTION\u203c New - CVE-2016-10729\n\nAn issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The \"runtar\" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate commands and perform command injection as root.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-10-25T00:21:16.000000Z"}]}