Reportbug (Debian) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2014-08-06. Vendor: Debian.

CVEs of Reportbug

• CVE-2014-0479 - CVSS 6.8 (medium), 2014-08-06: reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and…
• CVE-2005-0625 - CVSS 2.1 (low), 2005-02-28: reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
• CVE-2005-0624 - CVSS 2.1 (low), 2005-02-28: reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.