Unscored severity · published Feb 28, 2005
CVE-2005-0624
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords
–
CVSS
0.4%
EPSS
No
On KEV
Description
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Reportbug · Debian
2.60; 2.61 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0624
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0624
Vendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407
marc.info
http://marc.info/?l=bugtraq&m=110972153627388&w=2
Patch
http://secunia.com/advisories/14422/
Vendor Advisory
https://bugzilla.ubuntu.com/show_bug.cgi?id=6600
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/19504
More from Reportbug
–
CVE-2014-0479
reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and…
–
CVE-2005-0625
reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd