Debian Security Advisory DSA 153-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 153-1. OpenVAS Vulnerability Test $Id: deb1531.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 153-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2002-1111

CVE-2002-1111 affects Mantis (print_all_bug_page.php) in versions 0.17.3 and earlier where limit_reporters is not enforced, allowing remote attackers to view bug summaries for bugs they should not see. The Debian advisory for DSA-153-1 states the issue, including the specific vulnerability in the...

CVE-2002-1111

printallbugpage.php in Mantis 0.17.3 and earlier does not verify the limitreporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted...