Lucene search
HistoryJan 17, 2003 - 5:00 a.m.
CVE-2003-0012
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
5.1%
The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data.
Affected configurations
Node
mozillabugzillaMatch2.14
ORmozillabugzillaMatch2.14.1
ORmozillabugzillaMatch2.14.2
ORmozillabugzillaMatch2.14.3
ORmozillabugzillaMatch2.14.4
ORmozillabugzillaMatch2.16
ORmozillabugzillaMatch2.16.1
ORmozillabugzillaMatch2.17
ORmozillabugzillaMatch2.17.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | bugzilla | 2.14 | cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.14.1 | cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.14.2 | cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.14.3 | cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.14.4 | cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.16 | cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.16.1 | cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.17 | cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.17.1 | cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2003-0012
2004-09-01 04:00:00
cvelist
cvelist
CVE-2003-0012
2004-09-01 04:00:00
openvas
openvas
Debian Security Advisory DSA 230-1 (bugzilla)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-230)
2008-01-17 00:00:00
osv
osv
bugzilla - insecure permissions, spurious backup files
2003-01-16 00:00:00
debian
debian
nessus
nessus
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.2
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2003-0012