CVE-2002-0810

Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 contains an information leakage vulnerability in the syncshadowdb command. Error messages are written to HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails. Affected versions should be updat...

CVE-2002-0810

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails...