Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2010-0180
cve-2010-0180
bugzilla
install/filesystem.pm
vulnerability
nvd
security
sensitive configuration
localconfig files
use_suexec
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7, when use_suexec is enabled, uses world-readable permissions for the localconfig files, which allows local users to read sensitive configuration fields, as demonstrated by the database password field and the site_wide_secret field.
Affected configurations
Node
mozillabugzillaMatch3.5.1
ORmozillabugzillaMatch3.5.2
ORmozillabugzillaMatch3.5.3
ORmozillabugzillaMatch3.6
ORmozillabugzillaMatch3.7
Related
openvas
openvas
Bugzilla 'localconfig' Information Disclosure Vulnerability
2010-07-16 00:00:00
Bugzilla 'localconfig' Information Disclosure Vulnerability
2010-07-16 00:00:00
FreeBSD Ports: bugzilla
2010-07-22 00:00:00
prion
prion
Design/Logic Flaw
2010-06-28 17:30:00
Design/Logic Flaw
2010-06-28 17:30:00
seebug
seebug
Mozilla Bugzilla localconfigζδ»ΆδΏ‘ζ―ζ³ι²ζΌζ΄
2010-06-28 00:00:00
ubuntucve
ubuntucve
CVE-2010-0180
2010-06-28 00:00:00
CVE-2010-2470
2010-06-28 00:00:00
cvelist
cvelist
CVE-2010-0180
2022-10-03 16:21:10
CVE-2010-2470
2022-10-03 16:21:08
nvd
nvd
CVE-2010-0180
2010-06-28 17:30:00
CVE-2010-2470
2010-06-28 17:30:01
freebsd
freebsd
bugzilla -- information disclosure
2010-06-24 00:00:00
cve
cve
CVE-2010-2470
2022-10-03 16:21:08
nessus
nessus
FreeBSD : bugzilla -- information disclosure (f1331504-8849-11df-89b8-00151735203a)
2010-07-06 00:00:00
Bugzilla < 3.2.7 / 3.4.7 / 3.6.1 Multiple Vulnerabilities
2010-06-28 00:00:00
Bugzilla 'time-tracking' fields Information Disclosure
2010-06-30 00:00:00
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2010-0180