CVE-2007-5626 - CVE House
Back to Database
Status published Medium CVE-2007-5626

make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL...

Vulnerability Description

make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5626

Credits & Attribution

No credits recorded in the NVD database.

References

More from bacula

View All →
CVE-2017-15367
Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities...
Critical 9.8
CVE-2014-8295
SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote...
High 7.5
CVE-2012-4430
The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does...
Medium 4
CVE-2008-5373
mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary...
Medium 6.9
CVE-2005-2995
bacula 1.36.3 and earlier allows local users to modify or...
Low 3.6

Affected Vendor

Affected Software

bacula
Vulnerable Versions:
0

Timeline

Official Publish: October 23rd, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.