Unscored severity · published Feb 28, 2005
CVE-2005-0625
reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd
–
CVSS
0.4%
EPSS
No
On KEV
Description
reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Reportbug · Debian
2.60; 2.61; 3.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0625
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0625
Vendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407
marc.info
http://marc.info/?l=bugtraq&m=110972153627388&w=2
Patch
http://secunia.com/advisories/14422/
Vendor Advisory
https://bugzilla.ubuntu.com/show_bug.cgi?id=6600
Vendor Advisory
https://bugzilla.ubuntu.com/show_bug.cgi?id=6717
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/19520
More from Reportbug
–
CVE-2014-0479
reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and…
–
CVE-2005-0624
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords