46 matches found
FTP backend for Duplicity Discloses Passwords to Process Listing
The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments...
PYSEC-2026-633 FTP backend for Duplicity Discloses Passwords to Process Listing
The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments...
EUVD-2014-3500
Malware in sbrugna...
EUVD-2022-5669
Malicious code in bioql PyPI...
SUSE CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
FTP backend for Duplicity Discloses Passwords to Process Listing
The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments...
GHSA-WXCW-RQXC-HJ85 FTP backend for Duplicity Discloses Passwords to Process Listing
The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments...
duplicity trust management issue vulnerability
duplicity is a Linux-based file compression and backup utility. A trust management issue vulnerability exists in duplicity version 0.6.24. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An attacker can exploit default passwords o...
CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
DEBIAN-CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
UBUNTU-CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
Input validation
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2014-3495
CVE-2014-3495 affects duplicity 0.6.24, with the root cause described as improper verification of SSL certificates. The CVSS v3.1 base score is 7.5 (HIGH), driven by confidentiality impact. Exploitation details, affected environments, and remediation steps are not provided in the supplied documen...
CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2014-3495
duplicity 0.6.24 has improper verification of SSL certificates...
PT-2019-7092
Name of the Vulnerable Software and Affected Versions duplicity version 0.6.24 Description The issue is related to improper verification of SSL certificates. Recommendations For version 0.6.24, update to a newer version that properly verifies SSL certificates...
CVE-2014-3495: Improper Certificate Validation
duplicity 0.6.24 has improper verification of SSL certificates...
CVE-2007-5201
The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments...