CVE-2007-5626: Medium severity Bacula bacula vulnerability
makecatalogbackup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5626?
CVE-2007-5626 has a medium severity level due to its potential to expose sensitive information.
How do I fix CVE-2007-5626?
To fix CVE-2007-5626, upgrade Bacula to version 2.4.0 or later, where this vulnerability is mitigated.
What causes CVE-2007-5626?
CVE-2007-5626 is caused by Bacula sending a MySQL password as a command line argument and possibly transmitting it in cleartext emails.
What are the potential impacts of exploiting CVE-2007-5626?
Exploiting CVE-2007-5626 could allow an attacker to obtain the MySQL password by listing the process or sniffing the network.
Is CVE-2007-5626 present in all versions of Bacula?
CVE-2007-5626 is present in Bacula version 2.2.5 and likely earlier versions.