CVE-2007-5201

Affected software : Duplicity’s FTP backend prior to 0.4.9. What is vulnerable : the FTP backend passes the password as a command-line argument to ncftp, which could allow a local user to read the password by inspecting process arguments. Impact : password exposure to local users; confidentiality...