Lucene search

MozillaCVE-2014-8630

HistoryFeb 01, 2015 - 3:59 p.m.

CVE-2014-8630

2015-02-0115:59:04

CWE-77

mozilla

web.nvd.nist.gov

bugzilla

cve-2014-8630

command execution

remote code execution

information security

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

72.1%

JSON

Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and triggering crafted input to a two-argument Perl open call, as demonstrated by shell metacharacters in a product name.

Affected configurations

Nvd

Node

mozillabugzillaRange≤4.0.16

mozillabugzillaMatch4.1

mozillabugzillaMatch4.1.1

mozillabugzillaMatch4.1.2

mozillabugzillaMatch4.1.3

mozillabugzillaMatch4.2

mozillabugzillaMatch4.2rc1

mozillabugzillaMatch4.2rc2

mozillabugzillaMatch4.2.1

mozillabugzillaMatch4.2.2

mozillabugzillaMatch4.2.3

mozillabugzillaMatch4.2.4

mozillabugzillaMatch4.2.5

mozillabugzillaMatch4.2.6

mozillabugzillaMatch4.2.7

mozillabugzillaMatch4.2.8

mozillabugzillaMatch4.2.9

mozillabugzillaMatch4.2.10

mozillabugzillaMatch4.2.11

mozillabugzillaMatch4.3

mozillabugzillaMatch4.3.1

mozillabugzillaMatch4.3.2

mozillabugzillaMatch4.3.3

mozillabugzillaMatch4.4

mozillabugzillaMatch4.4rc1

mozillabugzillaMatch4.4rc2

mozillabugzillaMatch4.4.1

mozillabugzillaMatch4.4.2

mozillabugzillaMatch4.4.3

mozillabugzillaMatch4.4.4

mozillabugzillaMatch4.4.5

mozillabugzillaMatch4.4.6

mozillabugzillaMatch4.5

mozillabugzillaMatch4.5.1

mozillabugzillaMatch4.5.2

mozillabugzillaMatch4.5.3

mozillabugzillaMatch4.5.4

mozillabugzillaMatch4.5.5

mozillabugzillaMatch4.5.6

Node

fedoraprojectfedoraMatch20

fedoraprojectfedoraMatch21

VendorProductVersionCPE
mozillabugzilla*cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*
mozillabugzilla4.1cpe:2.3:a:mozilla:bugzilla:4.1:*:*:*:*:*:*:*
mozillabugzilla4.1.1cpe:2.3:a:mozilla:bugzilla:4.1.1:*:*:*:*:*:*:*
mozillabugzilla4.1.2cpe:2.3:a:mozilla:bugzilla:4.1.2:*:*:*:*:*:*:*
mozillabugzilla4.1.3cpe:2.3:a:mozilla:bugzilla:4.1.3:*:*:*:*:*:*:*
mozillabugzilla4.2cpe:2.3:a:mozilla:bugzilla:4.2:*:*:*:*:*:*:*
mozillabugzilla4.2cpe:2.3:a:mozilla:bugzilla:4.2:rc1:*:*:*:*:*:*
mozillabugzilla4.2cpe:2.3:a:mozilla:bugzilla:4.2:rc2:*:*:*:*:*:*
mozillabugzilla4.2.1cpe:2.3:a:mozilla:bugzilla:4.2.1:*:*:*:*:*:*:*
mozillabugzilla4.2.2cpe:2.3:a:mozilla:bugzilla:4.2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	bugzilla	*	cpe:2.3:a:mozilla:bugzilla::::::::
mozilla	bugzilla	4.1	cpe:2.3:a:mozilla:bugzilla:4.1:::::::*
mozilla	bugzilla	4.1.1	cpe:2.3:a:mozilla:bugzilla:4.1.1:::::::*
mozilla	bugzilla	4.1.2	cpe:2.3:a:mozilla:bugzilla:4.1.2:::::::*
mozilla	bugzilla	4.1.3	cpe:2.3:a:mozilla:bugzilla:4.1.3:::::::*
mozilla	bugzilla	4.2	cpe:2.3:a:mozilla:bugzilla:4.2:::::::*
mozilla	bugzilla	4.2	cpe:2.3:a:mozilla:bugzilla:4.2:rc1::::::
mozilla	bugzilla	4.2	cpe:2.3:a:mozilla:bugzilla:4.2:rc2::::::
mozilla	bugzilla	4.2.1	cpe:2.3:a:mozilla:bugzilla:4.2.1:::::::*
mozilla	bugzilla	4.2.2	cpe:2.3:a:mozilla:bugzilla:4.2.2:::::::*