CVE-2002-1196

Опубликовано: 28 окт. 2002

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set multiple bits.

Ссылки

http://bugzilla.mozilla.org/show_bug.cgi?id=167485#c12
http://marc.info/?l=bugtraq&m=103349804226566&w=2
http://www.debian.org/security/2002/dsa-173
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10233.php
Vendor Advisory
http://www.securityfocus.com/bid/5843
http://bugzilla.mozilla.org/show_bug.cgi?id=167485#c12
http://marc.info/?l=bugtraq&m=103349804226566&w=2
http://www.debian.org/security/2002/dsa-173
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10233.php
Vendor Advisory
http://www.securityfocus.com/bid/5843

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00455

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2002-1196

debian

почти 23 года назад

editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2 ...

GHSA-c3vj-q3f8-r9c3

github

больше 3 лет назад