CVE-2007-4656

backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.

Link	Resource
http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173
http://www2.backup-manager.org/Release063	Patch
http://secunia.com/advisories/26657	Patch Vendor Advisory
http://www.securityfocus.com/bid/25503
http://www.securitytracker.com/id?1018639
http://www.debian.org/security/2008/dsa-1518
http://secunia.com/advisories/29377
http://osvdb.org/37444
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392

Configuration 1

cpe:2.3:a:backup_manager:backup_manager:*:*:*:*:*:*:*:*

---

Published : 2007-09-04 10:17

Updated : 2013-08-28 05:37

---

NVD link : CVE-2007-4656

Mitre link : CVE-2007-4656

No products.

CWE-200

CWE-255

CWE-310