CVE-2007-2766 lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its a...
HighCVSS 7.2
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| backup manager | <= 0.7.5 | No fix listed |
| debian/backup-manager(Debian:12) | < 0.7.6-1 | 0.7.6-1 |
| debian/backup-manager(Debian:13) | < 0.7.6-1 | 0.7.6-1 |
| debian/backup-manager(Debian:14) | < 0.7.6-1 | 0.7.6-1 |
References
- bugzilla.backup-manager.org
- 34780 vdb-entry
- [Backup-manager-commits] 20070102 r528 - in backup-manager/trunk: . doc lib man po mailing-list
- ADV-2007-2412 vdb-entry
- www2.backup-manager.org patch
- backup-manager-password-plaintext(34489) vdb-entry
- Debian Security Tracker CVE-2007-2766 vendor-advisory