Duplicity Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Duplicity Project records in CISA KEV

No Duplicity Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Duplicity 1 record LOW

Records

1 record in Duplicity · all components

TI-2007-05011 CVE-2007-5201 · GHSA-wxcw-rqxc-hj85

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument…

LOW 21

The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00374 Published 2007-10-04 Fixed in 0.4.9 CWE-200

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0