CVE-2005-0624
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions...
CVE-2005-0624 is a low vulnerability (CVSS 2.1) in Debian Reportbug, published February 28, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in reportbug 3.8.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.36%EPSS, 30th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.8reportbug +2 more
Description
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
- Record
CVE-2005-0624- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
- Record
CVE-2005-0624- Updated
- 2026-11-02
EUVDEUVD-2005-0625No score
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
- Record
EUVD-2005-0625- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rgxh-w89p-mj37No score
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions...
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
- Record
GHSA-rgxh-w89p-mj37- Updated
- 2026-11-02
OSVNo score
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
- Record
CVE-2005-0624- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-0624No score
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
- Record
DEBIAN-CVE-2005-0624- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=295407
bugzilla.ubuntu.com/show_bug.cgi?id=6600
exchange.xforce.ibmcloud.com/vulnerabilities/19504
marc.info?l=bugtraq&m=110972153627388&w=2
secunia.com/advisories/14422
nvd.nist.gov/vuln/detail/CVE-2005-0624
github.com/advisories/GHSA-rgxh-w89p-mj37
security-tracker.debian.org/tracker/CVE-2005-0624