EUVD-2002-0802

Malware in sbrugna...

Bugzilla bug tracking system symbolic links vulnerability

syncshadowdb script symbolic links problem...

CVE-2005-4534

The shadow database feature syncshadowdb in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-4534

The shadow database feature syncshadowdb in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

[SA18218] Bugzilla "syncshadowdb" Script Insecure Temporary File Creation

TITLE: Bugzilla "syncshadowdb" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA18218 VERIFY ADVISORY: http://secunia.com/advisories/18218/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Bugzilla 2.x http://secunia.com/product/396/ DESCRIPTION:...

CVE-2002-0810

Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 contains an information leakage vulnerability in the syncshadowdb command. Error messages are written to HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails. Affected versions should be updat...