CVE-2007-4656

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-04 · updated 2026-06-16
Weakness: CWE-200

Description

backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.

Affected products

Backup Manager: through 0.6.2

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392
http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173
http://osvdb.org/37444
http://secunia.com/advisories/26657
http://secunia.com/advisories/29377
http://www.debian.org/security/2008/dsa-1518
http://www.securityfocus.com/bid/25503
http://www.securitytracker.com/id?1018639
http://www2.backup-manager.org/Release063
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392
http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173
http://osvdb.org/37444

Get alerted when CVE-2007-4656 or the next vulnerability affects your stack