CVE-2005-3138

Опубликовано: 05 окт. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set.

Ссылки

http://marc.info/?l=bugtraq&m=112818466125484&w=2
http://secunia.com/advisories/17030/
Patch
Vendor Advisory
http://www.bugzilla.org/security/2.18.4/
Vendor Advisory
http://www.securityfocus.com/bid/14995
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/22490
http://marc.info/?l=bugtraq&m=112818466125484&w=2
http://secunia.com/advisories/17030/
Patch
Vendor Advisory
http://www.bugzilla.org/security/2.18.4/
Vendor Advisory
http://www.securityfocus.com/bid/14995
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/22490

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:bugzilla:2.21:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00524

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-3138

ubuntu

почти 20 лет назад

CVE-2005-3138

debian

почти 20 лет назад

Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows ...

GHSA-5fwr-7h5m-9f6r

github

больше 3 лет назад

EPSS

Процентиль: 66%

0.00524

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other