FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. VID 58253655-d82c-11e1-907c-20cf30e32f6d OpenVAS Vulnerability Test $ Description: Auto generated from VID 58253655-d82c-11e1-907c-20cf30e32f6d Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-1968: Undefined Security Weakness

Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during construction of HTML bugmail documents, which allows remote attackers to obtain sensitive description information by reading the tooltip portions of an HTML e-mai...