CVE-2007-5626

Publication date 23 October 2007

Last updated 25 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

5.5 · Medium

Score breakdown

Description

make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and sometimes transmits cleartext e-mail containing this command line, which allows context-dependent attackers to obtain the password by listing the process and its arguments, or by sniffing the network.

Status

Package Ubuntu Release Status
bacula 9.10 karmic
Fixed 2.2.8-5ubuntu1
9.04 jaunty
Fixed 2.2.8-5ubuntu1
8.10 intrepid
Fixed 2.2.8-5ubuntu1
8.04 LTS hardy
Fixed 2.2.8-5ubuntu1
7.10 gutsy Ignored end of life, was needed
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed

Severity score breakdown

CVSS version: CVSS v3.0

Base score 5.5 · Medium

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

Other references

Access our resources on patching vulnerabilities