reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and reportbug/checkversions.py.
Max CVSS
6.8
EPSS Score
1.99%
Published
2014-08-06
Updated
2017-08-29
reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
Max CVSS
2.1
EPSS Score
0.05%
Published
2005-02-28
Updated
2017-07-11
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
Max CVSS
2.1
EPSS Score
0.04%
Published
2005-02-28
Updated
2017-07-11
3 vulnerabilities found