Product

debian reportbug vulnerabilities

9 published CVES affecting debian reportbug, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 9
Critical: 0
High: 0
Medium: 2
Low: 2
Unscored: 5
CISA KEV: 0

Latest debian reportbug CVEs

Newest publication first

DLA-3666-1 reportbug - security update
Published 2023-11-26

Unknown
DLA-1511-1 reportbug - security update
Published 2018-09-20

Unknown
DLA-1208-1 reportbug - security update
Published 2017-12-15

Unknown
DLA-31-1 reportbug - security update
Published 2014-08-07

Unknown
CVE-2014-0479 reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and reportbug/checkversions.py.
Published 2014-08-06

MediumCVSS 6.8

reportbug before 6.4.4+deb7u1 and 6.5.x before 6.5.0+nmu1 allows remote attackers to execute arbitrary commands via vectors related to compare_versions and reportbug/checkversions.py.
DSA-2997-1 reportbug - security update
Published 2014-08-05

Unknown
CVE-2008-2230 Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current wor...
Published 2008-06-11

MediumCVSS 4.6

Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory.
CVE-2005-0625 reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
Published 2005-03-02

LowCVSS 2.1

reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
CVE-2005-0624 reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
Published 2005-03-02

LowCVSS 2.1

reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.