CVE-2010-3172

CVE-2010-3172 describes a CRLF injection/HTTP response-splitting vulnerability in Bugzilla when Server Push is enabled, allowing a crafted URL to inject arbitrary HTTP headers and content. Affected Bugzilla versions: 3.2.9 and later within 3.2.x; 3.4.x before 3.4.9; 3.6.x before 3.6.3; 4.0.x befo...

CVE-2010-2470

CVE-2010-2470 affects Bugzilla’s Install/Filesystem.pm in Bugzilla versions 3.5.1–3.6.1 and 3.7–3.7.1 when use_suexec is enabled. It allows local users to read potentially sensitive data due to world-readable permissions inside the directories in question: (.bzr/ and data/webdot/), per the descri...

CVE-2010-2756

CVE-2010-2756 : Bugzilla's Search.pm exposes group membership information of arbitrary users via the Search interface (including boolean charts and group-based pronouns). Affects Bugzilla versions: 2.19.1–3.2.7, 3.3.1–3.4.7, 3.5.1–3.6.1, and 3.7–3.7.2. This constitutes an information disclosure v...

CVE-2009-3989

CVE-2009-3989 affects Bugzilla prior to fixed versions: 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3. The issue allows remote attackers to obtain sensitive information by requesting directories used for custom installations (e.g., CVS/, contrib/, docs/en/xml/, t/, old-pa...

CVE-2010-1204

CVE-2010-1204 concerns Bugzilla versions 2.17.1–3.7 where the Search.pm module mishandles a crafted boolean chart search URL, potentially exposing sensitive time-tracking data to remote attackers. The vulnerability arises from inadequate input handling in the search feature, enabling information ...

CVE-2010-3764

Affected software/versions: Bugzilla 2.12–3.2.8, 3.4.8, 3.6.2, 3.7.3, 4.1.** Root cause / vulnerability:** Old Charts implementation creates graph files in graphs/ with predictable names, enabling remote attackers to retrieve sensitive information via a modified URL.** Impact:** Unauthorized disc...

CVE-2009-3387

CVE-2009-3387 affects Bugzilla 3.3.1–3.4.4, 3.5.1–3.5.2; the root cause is that group restrictions are not preserved when moving a bug to a different product category, enabling remote attackers to view sensitive information via a bug request in opportunistic circumstances. The provided documents ...

CVE-2010-0180

Bugzilla localconfig information disclosure (CVE-2010-0180) affects Bugzilla 3.5.1–3.6.1 and 3.7.x when use_suexec is enabled. World-readable permissions on localconfig can allow local users to read sensitive fields (e.g., database password, site_wide_secret). Related CVEs (CVE-2010-2470) note si...

CVE-2010-2759

The CVE-2010-2759 entry applies to Bugzilla 2.23.1–3.2.7, 3.3.1–3.4.7, 3.5.1–3.6.1, and 3.7–3.7.2 when used with PostgreSQL. It describes a vulnerability where large integers in (1) bug and (2) attachment phrases are not handled correctly, allowing remote authenticated users to cause a denial of ...

CVE-2010-2757

CVE-2010-2757 describes a vulnerability in Bugzilla where the sudo feature fails to send impersonation notifications, enabling remote authenticated users to impersonate other users without discovery. The description lists affected Bugzilla releases across multiple branches (2.22rc1–3.2.7, 3.3.1–3...

CVE-2010-2758

CVE-2010-2758 concerns Bugzilla where error messages differ depending on whether a product exists, enabling remote users to enumerate product names. Affected versions include Bugzilla 2.17.1–3.2.7, 3.3.1–3.4.7, 3.5.1–3.6.1, and 3.7–3.7.2. The connected documents reference Fedora/OpenVAS advisorie...