CVE-2007-5626 - Vulnerability Details - OpenCVE

make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Bacula	Bacula

Configuration 1 [-]

cpe:2.3:a:bacula:bacula:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://bugs.bacula.org/view.php?id=990
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809
http://osvdb.org/41861
http://secunia.com/advisories/27243
http://secunia.com/advisories/31184
http://security.gentoo.org/glsa/glsa-200807-10.xml
http://www.securityfocus.com/bid/26156
http://www.vupen.com/english/advisories/2007/3572
https://exchange.xforce.ibmcloud.com/vulnerabilities/37336

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-10-23T16:00:00

Updated: 2024-08-07T15:39:13.531Z

Reserved: 2007-10-23T00:00:00

Link: CVE-2007-5626

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-10-23T16:46:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-5626

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-10-15T00:00:00", "descriptions": [{"lang": "en", "value": "make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "bacula-makecatalogbackup-info-disclosure(37336)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37336"}, {"name": "GLSA-200807-10", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "http://security.gentoo.org/glsa/glsa-200807-10.xml"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.bacula.org/view.php?id=990"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809"}, {"name": "ADV-2007-3572", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/3572"}, {"name": "27243", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27243"}, {"name": "41861", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/41861"}, {"name": "26156", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/26156"}, {"name": "31184", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/31184"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-5626", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "bacula-makecatalogbackup-info-disclosure(37336)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37336"}, {"name": "GLSA-200807-10", "refsource": "GENTOO", "url": "http://security.gentoo.org/glsa/glsa-200807-10.xml"}, {"name": "http://bugs.bacula.org/view.php?id=990", "refsource": "CONFIRM", "url": "http://bugs.bacula.org/view.php?id=990"}, {"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809", "refsource": "CONFIRM", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809"}, {"name": "ADV-2007-3572", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/3572"}, {"name": "27243", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27243"}, {"name": "41861", "refsource": "OSVDB", "url": "http://osvdb.org/41861"}, {"name": "26156", "refsource": "BID", "url": "http://www.securityfocus.com/bid/26156"}, {"name": "31184", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/31184"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:39:13.531Z"}, "title": "CVE Program Container", "references": [{"name": "bacula-makecatalogbackup-info-disclosure(37336)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37336"}, {"name": "GLSA-200807-10", "tags": ["vendor-advisory", "x_refsource_GENTOO", "x_transferred"], "url": "http://security.gentoo.org/glsa/glsa-200807-10.xml"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.bacula.org/view.php?id=990"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809"}, {"name": "ADV-2007-3572", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/3572"}, {"name": "27243", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27243"}, {"name": "41861", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/41861"}, {"name": "26156", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/26156"}, {"name": "31184", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/31184"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5626", "datePublished": "2007-10-23T16:00:00", "dateReserved": "2007-10-23T00:00:00", "dateUpdated": "2024-08-07T15:39:13.531Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:bacula:bacula:*:*:*:*:*:*:*:*", "matchCriteriaId": "586FE879-907B-47CC-B291-7E6EF765DB1D", "versionEndIncluding": "2.2.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network."}, {"lang": "es", "value": "make_catalog_backup en Bacula 2.2.5, y posiblemente anteriores, env\u00ede una contrase\u00f1a MySQL como un argumento de l\u00ednea de comando, y algunas veces transmite un e-mail en texto plano conteniendo esta l\u00ednea de comando, lo cual permite a atacantes dependientes del contexto obtener la contrase\u00f1a listando el proceso y sus argumentos, o realizando sniffing en la red."}], "id": "CVE-2007-5626", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2007-10-23T16:46:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Permissions Required", "Vendor Advisory"], "url": "http://bugs.bacula.org/view.php?id=990"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Mailing List", "Third Party Advisory"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://osvdb.org/41861"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/27243"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/31184"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://security.gentoo.org/glsa/glsa-200807-10.xml"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/26156"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Permissions Required", "Third Party Advisory"], "url": "http://www.vupen.com/english/advisories/2007/3572"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37336"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required", "Vendor Advisory"], "url": "http://bugs.bacula.org/view.php?id=990"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Mailing List", "Third Party Advisory"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=446809"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://osvdb.org/41861"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/27243"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory"], "url": "http://secunia.com/advisories/31184"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://security.gentoo.org/glsa/glsa-200807-10.xml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/26156"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Permissions Required", "Third Party Advisory"], "url": "http://www.vupen.com/english/advisories/2007/3572"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37336"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-319"}], "source": "nvd@nist.gov", "type": "Primary"}]}