|
CVE Reference: CVE-2005-2173
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2005-2173
|
|
Description:
The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via process_bug.cgi.
|
|
CVE Status:
Candidate
|
|
References:
ST
1014428
CONFIRM
http://www.bugzilla.org/security/2.18.1/
|
|
|
Return to the previous page.
|
