CVE-2007-2766
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext...
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
Exploit likelihood
What each source reports
NVD Score used
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
CVE-2007-2766- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
CVE-2007-2766- Updated
- 2026-11-02
EUVDEUVD-2007-2758 No score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
EUVD-2007-2758- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w99m-9m8w-9wj5 No score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext...
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
GHSA-w99m-9m8w-9wj5- Updated
- 2026-11-02
OSV No score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
CVE-2007-2766- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2766 No score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
DEBIAN-CVE-2007-2766- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
backup-managerDebian:12 |
before 0.7.6-1 | 0.7.6-1 |
backup-managerDebian:13 |
before 0.7.6-1 | 0.7.6-1 |
backup-managerDebian:14 |
before 0.7.6-1 | 0.7.6-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2766 is a high vulnerability (CVSS 7.2) in Backup Manager Manager, published May 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in backup-manager 0.7.6-1.
References
vupen.com/english/advisories/2007/2412
exchange.xforce.ibmcloud.com/vulnerabilities/34489
bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146
backup-manager.org/pipermail/backup-manager-commits/2007-January/000212.html
www2.backup-manager.org/Release076
osvdb.org/34780
nvd.nist.gov/vuln/detail/CVE-2007-2766
github.com/advisories/GHSA-w99m-9m8w-9wj5
security-tracker.debian.org/tracker/CVE-2007-2766