PatchTheCVEbackup manager vulnerabilities and fixes
Recent CVEs affecting backup manager, with upgrade or downgrade steps. 5 tracked.
Also searched as: backupmanager.
backup manager has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-09-04. Highest priority: CVE-2005-2212 (score 38/100).
- CVE-2007-4656 LOW 2.1 UPGRADE backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password
- CVE-2007-2766 HIGH 7.2 UPGRADE lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line a
- CVE-2005-2212 MEDIUM 6.4 DOWNGRADE Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows
- CVE-2005-2211 MEDIUM 4.6 DOWNGRADE Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized fil
- CVE-2005-1855 LOW 2.1 DOWNGRADE MITIGATE Backup Manager (backup-manager) before 0.5.8 creates backup files with world-readable default permissions, whi
FAQ
How do I fix backup manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is backup manager being exploited right now?
None of the tracked backup manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which backup manager CVE should I patch first?
CVE-2005-2212 currently ranks highest (38/100): Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows.