CVE-2005-0624: reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which al...

Security readout for executives and security teams

CVE-2005-0624 is an information disclosure flaw in reportbug before 2.62. It could create a user configuration file readable by all local users, exposing email smarthost passwords stored there. Business urgency is highest on older shared Linux systems where local users have accounts. Exposure is likely limited to systems with reportbug before 2.62 where .reportbugrc was created and contains smarthost credentials. Risk is higher on multi-user Debian or Ubuntu-derived hosts. Systems without local untrusted users or without stored mail credentials are less exposed. Prioritize remediation on legacy shared Linux systems and environments storing mail relay credentials. The issue is old and local-only, but exposed credentials can create downstream email abuse or account compromise risk. Mitigation focus: Upgrade reportbug to version 2.62 or a vendor-fixed package.; Check Debian or Ubuntu advisory guidance for supported fixed package versions.; Restrict .reportbugrc permissions so only the file owner can read it..

Prepared

Jun 29, 2026, 23:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.