CVE-2007-4656

published 2007-09-04

CVE-2007-4656: backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP…

Priority P4 6 low 2.1 CVSS 2.0

AV L AC L Au N C P I N A N

backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
backup_manager	backup_manager	<= 0.6.2	—
debian	backup-manager	< backup-manager 0.7.6-3 (bookworm)	backup-manager 0.7.6-3 (bookworm)

CVSS provenance

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

osv 7.2 HIGH

vendor_debian 7.2 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200