Published: 17/01/2003 Updated: 18/10/2016

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

The data collection script for Bugzilla 2.14.x prior to 2.14.5, 2.16.x prior to 2.16.2, and 2.17.x prior to 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla bugzilla 2.14.4
mozilla bugzilla 2.16
mozilla bugzilla 2.14.1
mozilla bugzilla 2.14.2
mozilla bugzilla 2.14.3
mozilla bugzilla 2.14
mozilla bugzilla 2.17.1
mozilla bugzilla 2.16.1
mozilla bugzilla 2.17

Two vulnerabilities have been discovered in Bugzilla, a web-based bug tracking system, by its authors The Common Vulnerabilities and Exposures Project identifies the following vulnerabilities: CAN-2003-0012 (BugTraq ID 6502) The provided data collection script intended to be run as a nightly cron job changes the permissions of the ...

NVD-CWE-Other http://www.iss.net/security_center/static/10971.php http://www.debian.org/security/2003/dsa-230 http://www.redhat.com/support/errata/RHSA-2003-012.html http://www.securityfocus.com/bid/6502 http://marc.info/?l=bugtraq&m=104154319200399&w=2 https://nvd.nist.gov https://www.debian.org/security/./dsa-230

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2003-0012

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect