CVE-2005-1563

Опубликовано: 14 мая 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.

Ссылки

http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040
http://marc.info/?l=bugtraq&m=111592031902962&w=2
http://secunia.com/advisories/15338
Patch
Vendor Advisory
http://www.bugzilla.org/security/2.16.8/
Patch
Vendor Advisory
http://www.osvdb.org/16425
Patch
Vendor Advisory
http://www.securityfocus.com/bid/13606
http://www.vupen.com/english/advisories/2005/0533
https://bugzilla.mozilla.org/show_bug.cgi?id=287109
Patch
Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040
http://marc.info/?l=bugtraq&m=111592031902962&w=2
http://secunia.com/advisories/15338
Patch
Vendor Advisory
http://www.bugzilla.org/security/2.16.8/
Patch
Vendor Advisory
http://www.osvdb.org/16425
Patch
Vendor Advisory
http://www.securityfocus.com/bid/13606
http://www.vupen.com/english/advisories/2005/0533
https://bugzilla.mozilla.org/show_bug.cgi?id=287109
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00807

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-1563

ubuntu

больше 20 лет назад

Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.

CVE-2005-1563

debian

больше 20 лет назад

Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different er ...

GHSA-pwxq-gvm7-4mhw

github

больше 3 лет назад

Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.

EPSS

Процентиль: 73%

0.00807

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other