Lucene search

[email protected]NVD:CVE-2014-1572

HistoryOct 13, 2014 - 1:55 a.m.

CVE-2014-1572

2014-10-1301:55:06

CWE-264

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

JSON

The confirm_create_account function in the account-creation feature in token.cgi in Bugzilla 2.x through 4.0.x before 4.0.15, 4.1.x and 4.2.x before 4.2.11, 4.3.x and 4.4.x before 4.4.6, and 4.5.x before 4.5.6 does not specify a scalar context for the realname parameter, which allows remote attackers to create accounts with unverified e-mail addresses by sending three realname values with realname=login_name as the second, as demonstrated by selecting an e-mail address with a domain name for which group privileges are automatically granted.

Affected configurations

NVD

Node

fedoraprojectfedoraMatch19

fedoraprojectfedoraMatch20

fedoraprojectfedoraMatch21

Node

mozillabugzillaMatch2.0

mozillabugzillaMatch2.2

mozillabugzillaMatch2.4

mozillabugzillaMatch2.6

mozillabugzillaMatch2.8

mozillabugzillaMatch2.9

mozillabugzillaMatch2.10

mozillabugzillaMatch2.12

mozillabugzillaMatch2.14

mozillabugzillaMatch2.14.1

mozillabugzillaMatch2.14.2

mozillabugzillaMatch2.14.3

mozillabugzillaMatch2.14.4

mozillabugzillaMatch2.14.5

mozillabugzillaMatch2.16

mozillabugzillaMatch2.16rc1

mozillabugzillaMatch2.16rc2

mozillabugzillaMatch2.16.1

mozillabugzillaMatch2.16.2

mozillabugzillaMatch2.16.3

mozillabugzillaMatch2.16.4

mozillabugzillaMatch2.16.5

mozillabugzillaMatch2.16.6

mozillabugzillaMatch2.16.7

mozillabugzillaMatch2.16.8

mozillabugzillaMatch2.16.9

mozillabugzillaMatch2.16.10

mozillabugzillaMatch2.16.11

mozillabugzillaMatch2.16_rc2

mozillabugzillaMatch2.17

mozillabugzillaMatch2.17.1

mozillabugzillaMatch2.17.2

mozillabugzillaMatch2.17.3

mozillabugzillaMatch2.17.4

mozillabugzillaMatch2.17.5

mozillabugzillaMatch2.17.6

mozillabugzillaMatch2.17.7

mozillabugzillaMatch2.18

mozillabugzillaMatch2.18rc1

mozillabugzillaMatch2.18rc2

mozillabugzillaMatch2.18rc3

mozillabugzillaMatch2.18.1

mozillabugzillaMatch2.18.2

mozillabugzillaMatch2.18.3

mozillabugzillaMatch2.18.4

mozillabugzillaMatch2.18.5

mozillabugzillaMatch2.18.6

mozillabugzillaMatch2.18.6\+

mozillabugzillaMatch2.18.7

mozillabugzillaMatch2.18.8

mozillabugzillaMatch2.18.9

mozillabugzillaMatch2.19

mozillabugzillaMatch2.19.1

mozillabugzillaMatch2.19.2

mozillabugzillaMatch2.19.3

mozillabugzillaMatch2.20

mozillabugzillaMatch2.20rc1

mozillabugzillaMatch2.20rc2

mozillabugzillaMatch2.20.1

mozillabugzillaMatch2.20.2

mozillabugzillaMatch2.20.3

mozillabugzillaMatch2.20.4

mozillabugzillaMatch2.20.5

mozillabugzillaMatch2.20.6

mozillabugzillaMatch2.20.7

mozillabugzillaMatch2.21

mozillabugzillaMatch2.21.1

mozillabugzillaMatch2.21.2

mozillabugzillaMatch2.21.2rc1

mozillabugzillaMatch2.22

mozillabugzillaMatch2.22rc1

mozillabugzillaMatch2.22.1

mozillabugzillaMatch2.22.2

mozillabugzillaMatch2.22.3

mozillabugzillaMatch2.22.4

mozillabugzillaMatch2.22.5

mozillabugzillaMatch2.22.6

mozillabugzillaMatch2.22.7

mozillabugzillaMatch2.23

mozillabugzillaMatch2.23.1

mozillabugzillaMatch2.23.2

mozillabugzillaMatch2.23.3

mozillabugzillaMatch2.23.4

mozillabugzillaMatch3.0

mozillabugzillaMatch3.0rc1

mozillabugzillaMatch3.0.0

mozillabugzillaMatch3.0.1

mozillabugzillaMatch3.0.2

mozillabugzillaMatch3.0.3

mozillabugzillaMatch3.0.4

mozillabugzillaMatch3.0.5

mozillabugzillaMatch3.0.6

mozillabugzillaMatch3.0.7

mozillabugzillaMatch3.0.8

mozillabugzillaMatch3.0.9

mozillabugzillaMatch3.0.10

mozillabugzillaMatch3.0.11

mozillabugzillaMatch3.0_rc1

mozillabugzillaMatch3.1.0

mozillabugzillaMatch3.1.1

mozillabugzillaMatch3.1.2

mozillabugzillaMatch3.1.3

mozillabugzillaMatch3.1.4

mozillabugzillaMatch3.2

mozillabugzillaMatch3.2rc1

mozillabugzillaMatch3.2rc2

mozillabugzillaMatch3.2.1

mozillabugzillaMatch3.2.2

mozillabugzillaMatch3.2.3

mozillabugzillaMatch3.2.4

mozillabugzillaMatch3.2.5

mozillabugzillaMatch3.2.6

mozillabugzillaMatch3.2.7

mozillabugzillaMatch3.2.8

mozillabugzillaMatch3.2.9

mozillabugzillaMatch3.2.10

mozillabugzillaMatch3.3

mozillabugzillaMatch3.3.1

mozillabugzillaMatch3.3.2

mozillabugzillaMatch3.3.3

mozillabugzillaMatch3.3.4

mozillabugzillaMatch3.4

mozillabugzillaMatch3.4rc1

mozillabugzillaMatch3.4.1

mozillabugzillaMatch3.4.2

mozillabugzillaMatch3.4.3

mozillabugzillaMatch3.4.4

mozillabugzillaMatch3.4.5

mozillabugzillaMatch3.4.6

mozillabugzillaMatch3.4.7

mozillabugzillaMatch3.4.8

mozillabugzillaMatch3.4.9

mozillabugzillaMatch3.4.10

mozillabugzillaMatch3.4.11

mozillabugzillaMatch3.4.12

mozillabugzillaMatch3.4.13

mozillabugzillaMatch3.5

mozillabugzillaMatch3.5.1

mozillabugzillaMatch3.5.2

mozillabugzillaMatch3.5.3

mozillabugzillaMatch3.6

mozillabugzillaMatch3.6rc1

mozillabugzillaMatch3.6.0

mozillabugzillaMatch3.6.1

mozillabugzillaMatch3.6.2

mozillabugzillaMatch3.6.3

mozillabugzillaMatch3.6.4

mozillabugzillaMatch3.6.5

mozillabugzillaMatch3.6.6

mozillabugzillaMatch3.6.7

mozillabugzillaMatch3.6.8

mozillabugzillaMatch3.6.9

mozillabugzillaMatch3.6.10

mozillabugzillaMatch3.6.11

mozillabugzillaMatch3.6.12

mozillabugzillaMatch3.6.13

mozillabugzillaMatch3.7

mozillabugzillaMatch3.7.1

mozillabugzillaMatch3.7.2

mozillabugzillaMatch3.7.3

mozillabugzillaMatch4.0

mozillabugzillaMatch4.0rc1

mozillabugzillaMatch4.0rc2

mozillabugzillaMatch4.0.1

mozillabugzillaMatch4.0.10

mozillabugzillaMatch4.0.11

mozillabugzillaMatch4.0.12

mozillabugzillaMatch4.0.13

mozillabugzillaMatch4.0.14

mozillabugzillaMatch4.1

mozillabugzillaMatch4.1.1

mozillabugzillaMatch4.1.2

mozillabugzillaMatch4.1.3

mozillabugzillaMatch4.2

mozillabugzillaMatch4.2rc1

mozillabugzillaMatch4.2rc2

mozillabugzillaMatch4.2.1

mozillabugzillaMatch4.2.2

mozillabugzillaMatch4.2.3

mozillabugzillaMatch4.2.4

mozillabugzillaMatch4.2.5

mozillabugzillaMatch4.2.6

mozillabugzillaMatch4.2.7

mozillabugzillaMatch4.2.8

mozillabugzillaMatch4.2.9

mozillabugzillaMatch4.2.10

mozillabugzillaMatch4.3

mozillabugzillaMatch4.3.1

mozillabugzillaMatch4.3.2

mozillabugzillaMatch4.3.3

mozillabugzillaMatch4.4

mozillabugzillaMatch4.4rc1

mozillabugzillaMatch4.4rc2

mozillabugzillaMatch4.4.1

mozillabugzillaMatch4.4.2

mozillabugzillaMatch4.4.3

mozillabugzillaMatch4.4.4

mozillabugzillaMatch4.4.5

mozillabugzillaMatch4.5

mozillabugzillaMatch4.5.1

mozillabugzillaMatch4.5.2

mozillabugzillaMatch4.5.3

mozillabugzillaMatch4.5.4

mozillabugzillaMatch4.5.5

References

advisories.mageia.org/MGASA-2014-0412.html

blog.gerv.net/2014/10/new-class-of-vulnerability-in-perl-web-applications/

lists.fedoraproject.org/pipermail/package-announce/2014-November/142524.html

lists.fedoraproject.org/pipermail/package-announce/2014-October/141309.html

lists.fedoraproject.org/pipermail/package-announce/2014-October/141321.html

openwall.com/lists/oss-security/2014/10/07/20

packetstormsecurity.com/files/128578/Bugzilla-Account-Creation-XSS-Information-Leak.html

www.bugzilla.org/security/4.0.14/

www.mandriva.com/security/advisories?name=MDVSA-2014:200

www.opennet.ru/opennews/art.shtml?num=40766

www.reddit.com/r/netsec/comments/2ihen0/new_class_of_vulnerability_in_perl_web/

www.securitytracker.com/id/1030978

bugzilla.mozilla.org/show_bug.cgi?id=1074812

security.gentoo.org/glsa/201607-11

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.2 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

JSON

Related for NVD:CVE-2014-1572

thn1 ubuntucve2 cvelist2 checkpoint_advisories1 cve2 prion2 debiancve1 nvd1 fedora3 nessus9 securityvulns3 openvas5 mageia1 freebsd2 gentoo1