CVE-2014-0479

CVE-2014-0479 affects the reportbug tool. Remote code execution is possible via vectors related to compare_versions and reportbug/checkversions.py. Debian fixed in stable at 6.4.4+deb7u1 and in later 6.5.x as 6.5.0+nmu1; other advisories reiterate upgrade to these versions. Affected software is r...

CVE-2005-0624

CVE-2005-0624 affects reportbug before 2.62; .reportbugrc is created with world‑readable permissions, allowing local users to obtain email smarthost passwords. Impact: partial confidentiality; exploit requires local access. NVD metrics show LOW severity (AV:L, AC:L, AU:N). The provided documents ...

CVE-2005-0625

CVE-2005-0625 affects reportbug 3.2, where settings from .reportbugrc are included in bug reports, exposing sensitive data such as smtpuser and smtppasswd. The underlying issue is the unintended leakage of stored mail credentials via bug reports. The impact is credential exposure; the available s...