missing filename reference validation in backup manifests

Details

Missing validation of a backup manifest's archive/blob filename references allowed a malicious pull source to trigger reads or writes of arbitrary files with specific extensions (.blob/.fidx/.didx) as user/group backup.

Missing validation of a backup manifest's archive/blob filename references allowed a push task to trigger reads of arbitrary files with specific extensions (.blob/.fidx/.didx) as user/group backup.

Missing validation of a backup manifest's contents during backup tasks allowed a malicious client to upload invalid backup manifests.

The pull and push aspects of this issue were privately reported by Geoffrey McClinsey <[email protected]>.

Fixed in

• proxmox-backup-server >= 4.2.5-1 (PBS 4.x)

• proxmox-backup-server >= 3.4.9-1 (PBS 3.x)