PT-2005-1671 · Debian · Reportbug

Rolf Leggewie · Published 2005-02-28 · Updated 2017-07-11 · CVE-2005-0625

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions reportbug version 3.2

Description The issue exposes sensitive information, such as smtpuser and smtppasswd, by including settings from the .reportbugrc file in bug reports.

Recommendations For reportbug version 3.2, consider removing or modifying the .reportbugrc file to exclude sensitive information, such as smtpuser and smtppasswd, from being included in bug reports.

Fix

Related Identifiers

CVE-2005-0625

Affected Products

Reportbug

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2005-0625 · Security Note
• https://bugzilla.ubuntu.com/show_bug.cgi?id=6600 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0625 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0625 · Vendor Advisory
• https://bugzilla.ubuntu.com/show_bug.cgi?id=6717 · Vendor Advisory
• http://secunia.com/advisories/14422 · Vendor Advisory
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0625 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19520 · Note
• http://marc.info/?l=bugtraq&m=110972153627388&w=2 · Note