The libdspam7-drv-mysql cron job in Debian GNU/Linux includes the MySQL dspam database password in a command line argument, which might allow local users to read the password by listing the process and its arguments.
References
Configurations
Information
Published : 2007-12-17 16:46
Updated : 2008-11-14 23:04
NVD link : CVE-2007-6418
Mitre link : CVE-2007-6418
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
debian
- debian_linux