CVE-2007-2766
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext...
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
Exploit likelihood
What each source reports
NVD Score used
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
CVE-2007-2766- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE ListNo score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
CVE-2007-2766- Updated
- 2026-11-02
EUVDEUVD-2007-2758No score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
EUVD-2007-2758- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w99m-9m8w-9wj5No score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext...
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
GHSA-w99m-9m8w-9wj5- Updated
- 2026-11-02
OSVNo score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
CVE-2007-2766- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-2766No score
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.
- Record
DEBIAN-CVE-2007-2766- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
backup-managerDebian:12 | before 0.7.6-1 | 0.7.6-1 |
backup-managerDebian:13 | before 0.7.6-1 | 0.7.6-1 |
backup-managerDebian:14 | before 0.7.6-1 | 0.7.6-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2766 is a high vulnerability (CVSS 7.2) in Backup Manager Manager, published May 18, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 27th percentile. Fixed in backup-manager 0.7.6-1.
References
vupen.com/english/advisories/2007/2412
exchange.xforce.ibmcloud.com/vulnerabilities/34489
bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=146
backup-manager.org/pipermail/backup-manager-commits/2007-January/000212.html
www2.backup-manager.org/Release076
osvdb.org/34780
nvd.nist.gov/vuln/detail/CVE-2007-2766
github.com/advisories/GHSA-w99m-9m8w-9wj5
security-tracker.debian.org/tracker/CVE-2007-2766