Sponsored link
Serve your customers, not your servers, with VERIO Linux VPS. Full-access test-drive here.
| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
backup-manager: password disclosure
| Package(s): | backup-manager | CVE #(s): | CVE-2007-4656 | |||
| Created: | March 17, 2008 | Updated: | March 19, 2008 | |||
| Description: | From the Debian advisory: Micha Lenk discovered that backup-manager, a command-line backup tool, sends the password as a command line argument when calling a FTP client, which may allow a local attacker to read this password (which provides access to all backed-up files) from the process listing. | |||||
| Alerts: |
| |||||
(Log in to post comments)