Lucene search
HistoryJan 17, 2003 - 5:00 a.m.
CVE-2003-0013
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0.008
Percentile
81.9%
The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for backup copies of the localconfig file that are made from editors such as vi and Emacs, which could allow remote attackers to obtain a database password by directly accessing the backup file.
Affected configurations
Node
mozillabugzillaMatch2.14
ORmozillabugzillaMatch2.14.1
ORmozillabugzillaMatch2.14.2
ORmozillabugzillaMatch2.14.3
ORmozillabugzillaMatch2.14.4
ORmozillabugzillaMatch2.16
ORmozillabugzillaMatch2.16.1
ORmozillabugzillaMatch2.17
ORmozillabugzillaMatch2.17.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | bugzilla | 2.14 | cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.14.1 | cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.14.2 | cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.14.3 | cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.14.4 | cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.16 | cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.16.1 | cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.17 | cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:* |
| mozilla | bugzilla | 2.17.1 | cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2003-0013
2004-09-01 04:00:00
cve
cve
CVE-2003-0013
2004-09-01 04:00:00
openvas
openvas
Debian Security Advisory DSA 230-1 (bugzilla)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-230)
2008-01-17 00:00:00
debian
debian
nessus
nessus
osv
osv
bugzilla - insecure permissions, spurious backup files
2003-01-16 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0.008
Percentile
81.9%
Related for NVD:CVE-2003-0013