CVE-2007-6418

Published: Dec 18, 2007Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password in a command line argument, which might allow local users to read the password by listing the process and its arguments.

Affected (1)

Products: Debian: Debian Linux

Debian

1 product

Debian Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448519

Source: cve@mitre.org

http://osvdb.org/44138

Source: cve@mitre.org

http://secunia.com/advisories/29059

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1501

Source: cve@mitre.org

http://www.securityfocus.com/bid/27938

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448519