Sponsored link
Serve your customers, not your servers, with VERIO Linux VPS. Full-access test-drive here.
| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
duplicity: password disclosure
| Package(s): | duplicity | CVE #(s): | CVE-2007-5201 | ||||||
| Created: | February 13, 2008 | Updated: | February 13, 2008 | ||||||
| Description: | From the CVE: The FTP backend for Duplicity sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments. | ||||||||
| Alerts: |
| ||||||||
(Log in to post comments)