:Micha Lenk has reported a security issue in Backup Manager, which can be exploited by malicious, local users to disclose sensitive information.The security issue is caused due to the host, username, and password used to connect to a remote FTP server being shown in the process list. This can be exploited to gain unauthorized FTP access to the remote backup server.The security issue is reported in versions prior to 0.6.3.Solution:Update to version 0.6.3.http://www2.backup-manager.org/Release063Provided and/or discovered by:Micha LenkOriginal Advisory:Backup Manager:http://www2.backup-manager.org/Release063Debian:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=439392

Original post by Pankaj