Debian Security Advisory 1518-1 – Micha Lenk discovered that backup-manager, a command-line backup tool, sends the password as a command line argument when calling a FTP client, which may allow a local attacker to read this password (which provides access to all backed-up files) from the process listing.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64619/dsa-1518-1.txt
Source: https://packetstormsecurity.com/files/64619/Debian-Linux-Security-Advisory-1518-1.html