|
Bugzilla Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA10149
|
|
|
Release Date:
|
2003-11-05
|
|
Last Update:
|
2003-11-27
|
|
Popularity:
|
7,877 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Security Bypass
Manipulation of data
Exposure of sensitive information
Privilege escalation
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Bugzilla 2.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Multiple vulnerabilities have been identified in Bugzilla allowing malicious users to inject SQL or view sensitive information.
1) A user with "editproducts" privileges can select arbitrary SQL queries, which will be executed by the cron job "collectstat.pl".
2) A user with "editkeywords" privileges can inject arbitrary SQL queries through the URL used to edit existing keywords.
3) Bug group memberships aren't properly deleted when a group is deleted. This allows previous members of that group to conduct administrative functions when a new group with the same ID is created.
4) It is possible to view the summary of a "secure" bug if an email address is supplied, which previously has been used to vote on the bug.
5) An unspecified vulnerability may allow users to view component descriptions for a product, which the user doesn't have access to.
The vulnerabilities have been reported in various versions prior to 2.17.5 and 2.16.4.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
