Lucene search

Tenable5585.PRM

HistoryJun 28, 2010 - 12:00 a.m.

Bugzilla < 3.2.7 / 3.4.7 / 3.6.1 Multiple Vulnerabilities

2010-06-2800:00:00

Tenable

www.tenable.com

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.8%

JSON

The remote web server is hosting Bugzilla, a web-based bug tracking application.

Versions of Bugzilla earlier than 3.2.7, 3.4.x earlier than 3.4.7, and 3.6.x earlier than 3.6.1 are potentially affected by multiple vulnerabilities :

It is possible to determine time-tracking information for bugs through specially crafted search URLs. (CVE-2010-1204)
If ‘$use_suexec’ is set to ‘1’ in the localconfig file, the localconfig file’s permissions were set as world-readable by checksetup.pl. (CVE-2010-0180)

Binary data 5585.prm

VendorProductVersionCPE
mozillabugzillacpe:/a:mozilla:bugzilla

Vendor	Product	Version	CPE
mozilla	bugzilla		cpe:/a:mozilla:bugzilla

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0180

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1204

www.bugzilla.org/security/3.2.6

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

71.8%

JSON

Related for 5585.PRM