CVE-2007-4656 backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain...
LowCVSS 2.1
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| backup manager | <= 0.6.2 | No fix listed |
| debian/backup-manager(Debian:12) | < 0.7.6-3 | 0.7.6-3 |
| debian/backup-manager(Debian:13) | < 0.7.6-3 | 0.7.6-3 |
| debian/backup-manager(Debian:14) | < 0.7.6-3 | 0.7.6-3 |
References
- bugs.debian.org
- bugzilla.backup-manager.org
- 37444 vdb-entry
- 26657 patch third-party-advisory vendor-advisory
- 29377 third-party-advisory
- DSA-1518 vendor-advisory
- 25503 vdb-entry
- 1018639 vdb-entry
- www2.backup-manager.org patch
- Debian Security Tracker CVE-2007-4656 vendor-advisory
- bugs.debian.org issue-tracking