Search

Find a vulnerability

Search criteria

    4 vulnerabilities by backup_manager

    CVE-2007-4656 (GCVE-0-2007-4656)

    Vulnerability from nvd – Published: 2007-09-04 22:00 – Updated: 2024-08-07 15:01
    VLAI
    Summary
    backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2261 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/26657 third-party-advisoryx_refsource_SECUNIA
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392 x_refsource_CONFIRM
    http://www.securityfocus.com/bid/25503 vdb-entryx_refsource_BID
    http://www2.backup-manager.org/Release063 x_refsource_CONFIRM
    http://secunia.com/advisories/29377 third-party-advisoryx_refsource_SECUNIA
    http://www.securitytracker.com/id?1018639 vdb-entryx_refsource_SECTRACK
    http://www.debian.org/security/2008/dsa-1518 vendor-advisoryx_refsource_DEBIAN
    http://bugzilla.backup-manager.org/cgi-bin/show_b… x_refsource_CONFIRM
    http://osvdb.org/37444 vdb-entryx_refsource_OSVDB
    Date Public
    2007-08-30 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T15:01:09.927Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "26657",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26657"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392"
              },
              {
                "name": "25503",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/25503"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www2.backup-manager.org/Release063"
              },
              {
                "name": "29377",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/29377"
              },
              {
                "name": "1018639",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://www.securitytracker.com/id?1018639"
              },
              {
                "name": "DSA-1518",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
                  "x_transferred"
                ],
                "url": "http://www.debian.org/security/2008/dsa-1518"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173"
              },
              {
                "name": "37444",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/37444"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2007-08-30T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2008-03-28T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "26657",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26657"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392"
            },
            {
              "name": "25503",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/25503"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www2.backup-manager.org/Release063"
            },
            {
              "name": "29377",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/29377"
            },
            {
              "name": "1018639",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://www.securitytracker.com/id?1018639"
            },
            {
              "name": "DSA-1518",
              "tags": [
                "vendor-advisory",
                "x_refsource_DEBIAN"
              ],
              "url": "http://www.debian.org/security/2008/dsa-1518"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173"
            },
            {
              "name": "37444",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/37444"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2007-4656",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "26657",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26657"
                },
                {
                  "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392"
                },
                {
                  "name": "25503",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/25503"
                },
                {
                  "name": "http://www2.backup-manager.org/Release063",
                  "refsource": "CONFIRM",
                  "url": "http://www2.backup-manager.org/Release063"
                },
                {
                  "name": "29377",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/29377"
                },
                {
                  "name": "1018639",
                  "refsource": "SECTRACK",
                  "url": "http://www.securitytracker.com/id?1018639"
                },
                {
                  "name": "DSA-1518",
                  "refsource": "DEBIAN",
                  "url": "http://www.debian.org/security/2008/dsa-1518"
                },
                {
                  "name": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173",
                  "refsource": "CONFIRM",
                  "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173"
                },
                {
                  "name": "37444",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/37444"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2007-4656",
        "datePublished": "2007-09-04T22:00:00.000Z",
        "dateReserved": "2007-09-04T00:00:00.000Z",
        "dateUpdated": "2024-08-07T15:01:09.927Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-2766 (GCVE-0-2007-2766)

    Vulnerability from nvd – Published: 2007-05-18 22:00 – Updated: 2024-08-07 13:49
    VLAI
    Summary
    lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2261 records in the last 180 days details
    References
    Date Public
    2007-05-10 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T13:49:57.303Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "ADV-2007-2412",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/2412"
              },
              {
                "name": "backup-manager-password-plaintext(34489)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34489"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146"
              },
              {
                "name": "[Backup-manager-commits] 20070102  r528 - in backup-manager/trunk: . doc lib man po",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.backup-manager.org/pipermail/backup-manager-commits/2007-January/000212.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www2.backup-manager.org/Release076"
              },
              {
                "name": "34780",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/34780"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2007-05-10T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "ADV-2007-2412",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/2412"
            },
            {
              "name": "backup-manager-password-plaintext(34489)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34489"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146"
            },
            {
              "name": "[Backup-manager-commits] 20070102  r528 - in backup-manager/trunk: . doc lib man po",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.backup-manager.org/pipermail/backup-manager-commits/2007-January/000212.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www2.backup-manager.org/Release076"
            },
            {
              "name": "34780",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/34780"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2007-2766",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "ADV-2007-2412",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/2412"
                },
                {
                  "name": "backup-manager-password-plaintext(34489)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34489"
                },
                {
                  "name": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146",
                  "refsource": "CONFIRM",
                  "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146"
                },
                {
                  "name": "[Backup-manager-commits] 20070102  r528 - in backup-manager/trunk: . doc lib man po",
                  "refsource": "MLIST",
                  "url": "http://www.backup-manager.org/pipermail/backup-manager-commits/2007-January/000212.html"
                },
                {
                  "name": "http://www2.backup-manager.org/Release076",
                  "refsource": "CONFIRM",
                  "url": "http://www2.backup-manager.org/Release076"
                },
                {
                  "name": "34780",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/34780"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2007-2766",
        "datePublished": "2007-05-18T22:00:00.000Z",
        "dateReserved": "2007-05-18T00:00:00.000Z",
        "dateUpdated": "2024-08-07T13:49:57.303Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-4656 (GCVE-0-2007-4656)

    Vulnerability from cvelistv5 – Published: 2007-09-04 22:00 – Updated: 2024-08-07 15:01
    VLAI
    Summary
    backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2261 records in the last 180 days details
    References
    URL Tags
    http://secunia.com/advisories/26657 third-party-advisoryx_refsource_SECUNIA
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392 x_refsource_CONFIRM
    http://www.securityfocus.com/bid/25503 vdb-entryx_refsource_BID
    http://www2.backup-manager.org/Release063 x_refsource_CONFIRM
    http://secunia.com/advisories/29377 third-party-advisoryx_refsource_SECUNIA
    http://www.securitytracker.com/id?1018639 vdb-entryx_refsource_SECTRACK
    http://www.debian.org/security/2008/dsa-1518 vendor-advisoryx_refsource_DEBIAN
    http://bugzilla.backup-manager.org/cgi-bin/show_b… x_refsource_CONFIRM
    http://osvdb.org/37444 vdb-entryx_refsource_OSVDB
    Date Public
    2007-08-30 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T15:01:09.927Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "26657",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26657"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392"
              },
              {
                "name": "25503",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/25503"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www2.backup-manager.org/Release063"
              },
              {
                "name": "29377",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/29377"
              },
              {
                "name": "1018639",
                "tags": [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
                  "x_transferred"
                ],
                "url": "http://www.securitytracker.com/id?1018639"
              },
              {
                "name": "DSA-1518",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
                  "x_transferred"
                ],
                "url": "http://www.debian.org/security/2008/dsa-1518"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173"
              },
              {
                "name": "37444",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/37444"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2007-08-30T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2008-03-28T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "26657",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26657"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392"
            },
            {
              "name": "25503",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/25503"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www2.backup-manager.org/Release063"
            },
            {
              "name": "29377",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/29377"
            },
            {
              "name": "1018639",
              "tags": [
                "vdb-entry",
                "x_refsource_SECTRACK"
              ],
              "url": "http://www.securitytracker.com/id?1018639"
            },
            {
              "name": "DSA-1518",
              "tags": [
                "vendor-advisory",
                "x_refsource_DEBIAN"
              ],
              "url": "http://www.debian.org/security/2008/dsa-1518"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173"
            },
            {
              "name": "37444",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/37444"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2007-4656",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "26657",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26657"
                },
                {
                  "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392",
                  "refsource": "CONFIRM",
                  "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392"
                },
                {
                  "name": "25503",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/25503"
                },
                {
                  "name": "http://www2.backup-manager.org/Release063",
                  "refsource": "CONFIRM",
                  "url": "http://www2.backup-manager.org/Release063"
                },
                {
                  "name": "29377",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/29377"
                },
                {
                  "name": "1018639",
                  "refsource": "SECTRACK",
                  "url": "http://www.securitytracker.com/id?1018639"
                },
                {
                  "name": "DSA-1518",
                  "refsource": "DEBIAN",
                  "url": "http://www.debian.org/security/2008/dsa-1518"
                },
                {
                  "name": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173",
                  "refsource": "CONFIRM",
                  "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173"
                },
                {
                  "name": "37444",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/37444"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2007-4656",
        "datePublished": "2007-09-04T22:00:00.000Z",
        "dateReserved": "2007-09-04T00:00:00.000Z",
        "dateUpdated": "2024-08-07T15:01:09.927Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-2766 (GCVE-0-2007-2766)

    Vulnerability from cvelistv5 – Published: 2007-05-18 22:00 – Updated: 2024-08-07 13:49
    VLAI
    Summary
    lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 28/100 over 2261 records in the last 180 days details
    References
    Date Public
    2007-05-10 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T13:49:57.303Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "ADV-2007-2412",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/2412"
              },
              {
                "name": "backup-manager-password-plaintext(34489)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34489"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146"
              },
              {
                "name": "[Backup-manager-commits] 20070102  r528 - in backup-manager/trunk: . doc lib man po",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.backup-manager.org/pipermail/backup-manager-commits/2007-January/000212.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www2.backup-manager.org/Release076"
              },
              {
                "name": "34780",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/34780"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2007-05-10T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "ADV-2007-2412",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/2412"
            },
            {
              "name": "backup-manager-password-plaintext(34489)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34489"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146"
            },
            {
              "name": "[Backup-manager-commits] 20070102  r528 - in backup-manager/trunk: . doc lib man po",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.backup-manager.org/pipermail/backup-manager-commits/2007-January/000212.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www2.backup-manager.org/Release076"
            },
            {
              "name": "34780",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/34780"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2007-2766",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "ADV-2007-2412",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/2412"
                },
                {
                  "name": "backup-manager-password-plaintext(34489)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34489"
                },
                {
                  "name": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146",
                  "refsource": "CONFIRM",
                  "url": "http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146"
                },
                {
                  "name": "[Backup-manager-commits] 20070102  r528 - in backup-manager/trunk: . doc lib man po",
                  "refsource": "MLIST",
                  "url": "http://www.backup-manager.org/pipermail/backup-manager-commits/2007-January/000212.html"
                },
                {
                  "name": "http://www2.backup-manager.org/Release076",
                  "refsource": "CONFIRM",
                  "url": "http://www2.backup-manager.org/Release076"
                },
                {
                  "name": "34780",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/34780"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2007-2766",
        "datePublished": "2007-05-18T22:00:00.000Z",
        "dateReserved": "2007-05-18T00:00:00.000Z",
        "dateUpdated": "2024-08-07T13:49:57.303Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }