—CVE-2008-2230Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute…
from 0, < 3.41
—CVE-2005-0624reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email…
from 0, < 3.8
—reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.