CVE-2007-2766: lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line a

Q: How do I fix CVE-2007-2766?

backup manager: upgrade to newer than 0.7.5. Exact commands for each OS are on this page.

Q: Is CVE-2007-2766 being exploited?

CVE-2007-2766 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2007-2766 affect?

CVE-2007-2766 affects backup manager. Severity is high (CVSS 7.2). lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.

Q: How urgent is CVE-2007-2766?

Priority 37/100. High severity; On your watchlist

Routine

HIGH 7.2WATCHLISTUPGRADE

CVE-2007-2766 is a high-severity flaw (CVSS 7.2) affecting backup manager. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh.

Why this priority

High severity
On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score	7.2 (High)
EPSS exploit chance	0.3% (top 73%)
CISA exploited list	No
Weakness	CWE-255
Published	2007-05-18
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: backup manager

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2007-05-18 22:30 UTCPublished CVE record published
2026-06-16 22:40 UTCUpdated Record last modified

backup manager backup manager UPGRADE

Affected: <= 0.7.5

Fixed in: newer than 0.7.5

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy backup-manager || rpm -q backup-manager || backup-manager --version

2. UPGRADE to newer than 0.7.5 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade backup-manager

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade backup-manager

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2007-2766?

backup manager: upgrade to newer than 0.7.5. Exact commands for each OS are on this page.

Is CVE-2007-2766 being exploited?

CVE-2007-2766 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2007-2766 affect?

CVE-2007-2766 affects backup manager. Severity is high (CVSS 7.2). lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.

How urgent is CVE-2007-2766?

Priority 37/100. High severity; On your watchlist

Software pages

MySQL vulnerabilities

Related CVEs

CVE-2007-4656 LOW 2.1 UPGRADE backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password
CVE-2005-2212 MEDIUM 6.4 DOWNGRADE Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows
CVE-2005-2211 MEDIUM 4.6 DOWNGRADE Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized fil
CVE-2005-1855 LOW 2.1 DOWNGRADE MITIGATE Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, whi

References

← Back to latest CVEs