PT-2005-1671 · Debian · Reportbug

Rolf Leggewie · Publicado 2005-02-28 · Atualizado 2017-07-11 · CVE-2005-0625

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions reportbug version 3.2

Description The issue exposes sensitive information, such as smtpuser and smtppasswd, by including settings from the .reportbugrc file in bug reports.

Recommendations For reportbug version 3.2, consider removing or modifying the .reportbugrc file to exclude sensitive information, such as smtpuser and smtppasswd, from being included in bug reports.

Correção

Identificadores relacionados

CVE-2005-0625

Produtos afetados

Reportbug

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2005-0625 · Nota de Segurança
• https://bugzilla.ubuntu.com/show_bug.cgi?id=6600 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0625 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2005-0625 · Aviso do Fabricante
• https://bugzilla.ubuntu.com/show_bug.cgi?id=6717 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19520 · Nota
• http://secunia.com/advisories/14422 · Aviso do Fabricante
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-0625 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=110972153627388&w=2 · Nota