Lucene search

MitreCVE-2005-3138

HistoryOct 05, 2005 - 9:02 p.m.

CVE-2005-3138

2005-10-0521:02:00

mitre

web.nvd.nist.gov

bugzilla

cve-2005-3138

security vulnerability

information disclosure

remote attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.016

Percentile

87.2%

JSON

Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set.

Affected configurations

Nvd

Node

mozillabugzillaMatch2.18rc1

mozillabugzillaMatch2.18rc2

mozillabugzillaMatch2.18rc3

mozillabugzillaMatch2.18.1

mozillabugzillaMatch2.18.2

mozillabugzillaMatch2.18.3

mozillabugzillaMatch2.19

mozillabugzillaMatch2.19.1

mozillabugzillaMatch2.19.2

mozillabugzillaMatch2.19.3

mozillabugzillaMatch2.20rc1

mozillabugzillaMatch2.20rc2

mozillabugzillaMatch2.21

VendorProductVersionCPE
mozillabugzilla2.18cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*
mozillabugzilla2.18cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*
mozillabugzilla2.18cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*
mozillabugzilla2.18.1cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*
mozillabugzilla2.18.2cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*
mozillabugzilla2.18.3cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*
mozillabugzilla2.19cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*
mozillabugzilla2.19.1cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:*
mozillabugzilla2.19.2cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:*
mozillabugzilla2.19.3cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	bugzilla	2.18	cpe:2.3:a:mozilla:bugzilla:2.18:rc1::::::
mozilla	bugzilla	2.18	cpe:2.3:a:mozilla:bugzilla:2.18:rc2::::::
mozilla	bugzilla	2.18	cpe:2.3:a:mozilla:bugzilla:2.18:rc3::::::
mozilla	bugzilla	2.18.1	cpe:2.3:a:mozilla:bugzilla:2.18.1:::::::*
mozilla	bugzilla	2.18.2	cpe:2.3:a:mozilla:bugzilla:2.18.2:::::::*
mozilla	bugzilla	2.18.3	cpe:2.3:a:mozilla:bugzilla:2.18.3:::::::*
mozilla	bugzilla	2.19	cpe:2.3:a:mozilla:bugzilla:2.19:::::::*
mozilla	bugzilla	2.19.1	cpe:2.3:a:mozilla:bugzilla:2.19.1:::::::*
mozilla	bugzilla	2.19.2	cpe:2.3:a:mozilla:bugzilla:2.19.2:::::::*
mozilla	bugzilla	2.19.3	cpe:2.3:a:mozilla:bugzilla:2.19.3:::::::*

Rows per page:

1-10 of 131

References

marc.info/?l=bugtraq&m=112818466125484&w=2

secunia.com/advisories/17030/

www.bugzilla.org/security/2.18.4/

www.securityfocus.com/bid/14995

exchange.xforce.ibmcloud.com/vulnerabilities/22490

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.016

Percentile

87.2%

JSON

Related for CVE-2005-3138