Debian Reportbug vulnerabilities

3 vulnerabilities

Known vulnerabilities in Debian Reportbug, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2014-0479canonicalreportbug+3
EPSS score
2.73%
reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and reportbug/checkversions.py.2.1CVE-2005-0624debianreportbug+1
EPSS score
0.36%
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.2.1CVE-2005-0625debianreportbug+1
EPSS score
0.42%
reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.