Vulnerabilities > CVE-2002-0009 - Unspecified vulnerability in Mozilla Bugzilla

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

mozilla

NVD

Published: 2002-01-31

Updated: 2008-09-10

Summary

show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu.

Vulnerable Configurations

Part	Description	Count
Application	Mozilla Mozilla Bugzilla - Mozilla Bugzilla 2.0 Mozilla Bugzilla 2.2 Mozilla Bugzilla 2.4 Mozilla Bugzilla 2.6 Mozilla Bugzilla 2.8 Mozilla Bugzilla 2.9 Mozilla Bugzilla 2.10 Mozilla Bugzilla 2.12 Mozilla Bugzilla 2.14 Mozilla Bugzilla 2.14.1	11

Redhat

advisories

rhsa

id	RHSA-2002:001

References

http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html
http://bugzilla.mozilla.org/show_bug.cgi?id=102141
http://rhn.redhat.com/errata/RHSA-2002-001.html
http://www.bugzilla.org/security2_14_1.html
http://www.iss.net/security_center/static/7802.php
http://www.securityfocus.com/bid/3798