Debian Security Advisory DSA 230-1 (bugzilla)

The remote host is missing an update to bugzilla announced via advisory DSA 230-1. OpenVAS Vulnerability Test $Id: deb2301.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 230-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2003-0012

CVE-2003-0012 (Bugzilla) is associated with Bugzilla data/mining directory being set to world-writable when the data collection script runs, enabling local modification or deletion of collected data. The vulnerability is documented in Debian DSA-230-1 and Debian/NVD entries, with affected Bugzill...

CVE-2003-0012

The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data...