CVE-2007-4656

LOW 2.1CVE-2007-4656 · Published 04/09/2007 · updated 16/06/2026

In short

CVE-2007-4656 is a LOW (CVSS 2.1) vulnerability affecting backup manager (backup manager).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
backup manager backup_manager	`≤ 0.6.2`	No fix yet

Description

backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line arguments during FTP uploads, which allows local users to obtain sensitive information by listing the process and its arguments, a different vulnerability than CVE-2007-2766.

References

bugs.debian.org/cgi-bin/bugreport.cgi
bugzilla.backup-manager.org/cgi-bin/show_bug.cgi
osvdb.org/37444
secunia.com/advisories/26657 · Patch
secunia.com/advisories/29377
debian.org/security/2008/dsa-1518
securityfocus.com/bid/25503
securitytracker.com/id
www2.backup-manager.org/Release063 · Patch

More vulnerabilities in backup manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free