debian/backup-manager vulnerabilities

Latest debian/backup-manager CVEs

Newest publication first

1. DSA-1518-1 backup-manager - information disclosure

   Published 2008-03-15

   Unknown

2. CVE-2007-4656 backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain...

   Published 2007-09-04

   Low·CVSS 2.1 EPSS 0.36%

   backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vul...

3. CVE-2007-2766 lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its a...

   Published 2007-05-18

   High·CVSS 7.2 EPSS 0.33%

   lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

4. CVE-2005-1856 The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack.

   Published 2005-08-29

   Low·CVSS 2.1 EPSS 0.33%

   The CD-burning feature in backup-manager 0.5.8 and earlier uses a fixed filename in a world-writable directory for logging, which allows local users to overwrite files via a symlink attack.

5. CVE-2005-1855 Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information.

   Published 2005-08-29

   Low·CVSS 2.1 EPSS 0.36%

   Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, which allows local users to obtain sensitive information.

6. DSA-787-1 backup-manager - insecure permissions and tempfile

   Published 2005-08-26

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.