Vulnerabilities (CVE)

Filtered by vendor Debian Subscribe
Filtered by product Reportbug
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-0479 2 Canonical, Debian 2 Reportbug, Reportbug 2023-12-10 6.8 MEDIUM N/A
reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and reportbug/checkversions.py.
CVE-2005-0625 1 Debian 1 Reportbug 2023-12-10 2.1 LOW N/A
reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
CVE-2005-0624 1 Debian 1 Reportbug 2023-12-10 2.1 LOW N/A
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.