Lucene search
MitreCVE-2005-2173HistoryJul 08, 2005 - 4:00 a.m.
CVE-2005-2173
2005-07-0804:00:00
mitre
web.nvd.nist.gov
30
bugzilla
flag
validation
security
bug
id
vulnerability
process_bug.cgi
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
42.2%
The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via process_bug.cgi.
Affected configurations
Node
mozillabugzillaMatch2.17.1
ORmozillabugzillaMatch2.17.3
ORmozillabugzillaMatch2.17.4
ORmozillabugzillaMatch2.17.5
ORmozillabugzillaMatch2.17.6
ORmozillabugzillaMatch2.17.7
ORmozillabugzillaMatch2.18
ORmozillabugzillaMatch2.18rc1
ORmozillabugzillaMatch2.18rc2
ORmozillabugzillaMatch2.18rc3
ORmozillabugzillaMatch2.18.1
ORmozillabugzillaMatch2.19
ORmozillabugzillaMatch2.19.1
ORmozillabugzillaMatch2.19.2
ORmozillabugzillaMatch2.19.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | bugzilla | 2.17.1 | cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.17.3 | cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.17.4 | cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.17.5 | cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.17.6 | cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.17.7 | cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.18 | cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.18 | cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:* |
| mozilla | bugzilla | 2.18 | cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:* |
| mozilla | bugzilla | 2.18 | cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2005-2173
2005-07-08 00:00:00
cvelist
cvelist
CVE-2005-2173
2005-07-08 04:00:00
nvd
nvd
CVE-2005-2173
2005-07-08 04:00:00
freebsd
freebsd
bugzilla -- multiple vulnerabilities
2005-07-07 00:00:00
nessus
nessus
Bugzilla <= 2.18.1 / 2.19.3 Multiple Vulnerabilities (ID, more)
2005-07-08 00:00:00
GLSA-200507-12 : Bugzilla: Unauthorized access and information disclosure
2005-07-14 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200507-12 (bugzilla)
2008-09-24 00:00:00
FreeBSD Ports: bugzilla, ja-bugzilla
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200507-12 (bugzilla)
2008-09-24 00:00:00
gentoo
gentoo
Bugzilla: Unauthorized access and information disclosure
2005-07-13 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
42.2%
Related for CVE-2005-2173