Description
backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.
References (9)
Core 9
Core References
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/26657
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/25503
Patch x_refsource_confirm
http://www2.backup-manager.org/Release063
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29377
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1018639
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2008/dsa-1518
Issue Tracking x_refsource_confirm
http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/37444
Scores
EPSS
0.0036
EPSS Percentile
28.3%
Details
CWE
CWE-200
CWE-255
CWE-310
Status
published
Products (1)
backup_manager/backup_manager
< 0.6.2
Published
Sep 04, 2007
Tracked Since
Feb 18, 2026