Gentoo Linux Security Advisory 201405-11 - A vulnerability in Bacula may allow remote attackers to obtain sensitive information. Versions less than 5.2.12 are affected.
76cf66128f37533b55fda0ee8640a6ca34fd157cff55fdd1fad7a1636f5f9164
Mandriva Linux Security Advisory 2012-166 - The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows remote authenticated users to obtain resource dump information via unspecified vectors. The updated packages have been patched to correct this issue.
8cfe8805dd48a203515484d432c7248bbb3799beb183b5f3b2580af17bdd261a
Debian Linux Security Advisory 2558-1 - It was discovered that bacula, a network backup service, does not properly enforce console ACLs. This could allow information about resources to be dumped by an otherwise-restricted client.
540e28b87842e07569ce4cdb550d5fd82780156516cf39012cc27566adf0b7d9