Lucene search
HistoryJul 08, 2005 - 4:00 a.m.
CVE-2005-2173
bugzilla
flag
validation
security
bug
id
vulnerability
process_bug.cgi
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.4%
The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via process_bug.cgi.
Affected configurations
Node
mozillabugzillaMatch2.17.1
ORmozillabugzillaMatch2.17.3
ORmozillabugzillaMatch2.17.4
ORmozillabugzillaMatch2.17.5
ORmozillabugzillaMatch2.17.6
ORmozillabugzillaMatch2.17.7
ORmozillabugzillaMatch2.18
ORmozillabugzillaMatch2.18rc1
ORmozillabugzillaMatch2.18rc2
ORmozillabugzillaMatch2.18rc3
ORmozillabugzillaMatch2.18.1
ORmozillabugzillaMatch2.19
ORmozillabugzillaMatch2.19.1
ORmozillabugzillaMatch2.19.2
ORmozillabugzillaMatch2.19.3
Related
ubuntucve
ubuntucve
CVE-2005-2173
2005-07-08 00:00:00
cvelist
cvelist
CVE-2005-2173
2005-07-08 04:00:00
nvd
nvd
CVE-2005-2173
2005-07-08 04:00:00
nessus
nessus
Bugzilla <= 2.18.1 / 2.19.3 Multiple Vulnerabilities (ID, more)
2005-07-08 00:00:00
GLSA-200507-12 : Bugzilla: Unauthorized access and information disclosure
2005-07-14 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200507-12 (bugzilla)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200507-12 (bugzilla)
2008-09-24 00:00:00
FreeBSD Ports: bugzilla, ja-bugzilla
2008-09-04 00:00:00
gentoo
gentoo
Bugzilla: Unauthorized access and information disclosure
2005-07-13 00:00:00
freebsd
freebsd
bugzilla -- multiple vulnerabilities
2005-07-07 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
42.4%
Related for CVE-2005-2173