Lucene search
HistoryJun 27, 2001 - 4:00 a.m.
CVE-2001-0329
cve-2001-0329
bugzilla
remote attack
command execution
vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.032 Low
EPSS
Percentile
91.3%
Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login cookie in post_bug.cgi, or (2) the who parameter in process_bug.cgi.
Affected configurations
Node
mozillabugzillaMatch2.4
ORmozillabugzillaMatch2.6
ORmozillabugzillaMatch2.8
ORmozillabugzillaMatch2.10
Related
cvelist
cvelist
CVE-2001-0329
2001-05-24 04:00:00
nvd
nvd
CVE-2001-0329
2001-06-27 04:00:00
openvas
openvas
Bugzilla remote arbitrary command execution
2005-11-03 00:00:00
Bugzilla remote arbitrary command execution
2005-11-03 00:00:00
nessus
nessus
Bugzilla Multiple Remote Command Execution
2004-10-25 00:00:00
securityvulns
securityvulns
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
High
0.032 Low
EPSS
Percentile
91.3%
Related for CVE-2001-0329