NVD

Id
57689  
Name
CVE-2007-5626  
Description
make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-23  
Modified Date
2011-03-07  
Seq
2007-5626  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
295225 57689 CVE-2007-5626 http://bugs.bacula.org/view.php?id=990  View
295226 57689 CVE-2007-5626 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809  View
295227 57689 CVE-2007-5626 GLSA-200807-10  View
295228 57689 CVE-2007-5626 26156  View
295229 57689 CVE-2007-5626 ADV-2007-3572  View
295230 57689 CVE-2007-5626 bacula-makecatalogbackup-info-disclosure(37336)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54131 JVNDB-2007-002823 Bacula の make_catalog_backup におけるパスワードを取得される脆弱性 Bacula の make_catalog_backup には、MySQL パスワードを平文のコマンドライン引数として送信する、およびコマンドラインを含む平文の電子メールを送信するため、パスワードを取得される脆弱性が存在します。 CVE-2007-5626 28981 CVE-2007-5626 57689 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002823.html 2007-10-23 2012-06-26 View