CVE-2007-2766 - lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext comm

CVE-2007-2766

Summary

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

References

Vulnerable Configurations

cpe:2.3:a:backup_manager:backup_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:backup_manager:backup_manager:*:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 29-07-2017 - 01:31)
Impact:
Exploitability:

CWE

CWE-255

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

confirm	http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146 http://www2.backup-manager.org/Release076
mlist	[Backup-manager-commits] 20070102 r528 - in backup-manager/trunk: . doc lib man po
osvdb	34780
vupen	ADV-2007-2412
xf	backup-manager-password-plaintext(34489)

Last major update

29-07-2017 - 01:31

Published

18-05-2007 - 22:30

Last modified

29-07-2017 - 01:31