CVE-2005-4802: Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on...

Security readout for executives and security teams

Flexbackup 1.2.1 and earlier can handle temporary files unsafely. A local user on the same system may be able to trick Flexbackup into overwriting files and executing code. This is mainly a risk for legacy systems where Flexbackup is still installed or scheduled for backups. Exposure is most likely on older Unix or Linux servers still running Flexbackup 1.2.1 or earlier. This is not described as remotely exploitable; the attacker needs local user access on the affected host. Prioritize remediation on shared legacy servers or backup hosts. The issue is old and local-only, but backup software often touches sensitive files, so stale installations can create disproportionate operational risk. Mitigation focus: Inventory systems for Flexbackup and confirm installed versions.; Apply vendor or distribution security updates, including Debian DSA-1216 where applicable.; Disable Flexbackup jobs until updated if the system is high risk..

Prepared

Jun 29, 2026, 12:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.