CVE-2005-0624

6 documents6 sources
Severity
2.1LOW
EPSS
0.1%
top 81.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Debian Reportbug
Timeline
PublishedFeb 28
Latest updateMay 1

Description

reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages2 packages

▶Debianreportbug< 3.8+3
▶NVDdebian/reportbug2.60, 2.61+1

Patches

Patch: secunia.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-rgxh-w89p-mj37: reportbug before 2↗2022-05-01
▶
CVEList
CVE-2005-0624: reportbug before 2↗2005-03-02
▶
OSV
CVE-2005-0624: reportbug before 2↗2005-02-28
▶

💥Exploits & PoCs

1
Exploit-DB
Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection↗2006-02-08
▶

📋Vendor Advisories

1
Debian
CVE-2005-0624: reportbug - reportbug before 2.62 creates the .reportbugrc configuration file with world-rea...↗2005
▶
CVE-2005-0624 (LOW CVSS 2.1) | reportbug before 2.62 creates the . | cvebase.io