Lucene search
HistorySep 15, 2009 - 10:30 p.m.
CVE-2009-3165
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.2
Confidence
Low
EPSS
0.001
Percentile
51.1%
SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.
Affected configurations
Node
mozillabugzillaMatch2.23.4
ORmozillabugzillaMatch3.0
ORmozillabugzillaMatch3.0rc1
ORmozillabugzillaMatch3.0.1
ORmozillabugzillaMatch3.0.2
ORmozillabugzillaMatch3.0.3
ORmozillabugzillaMatch3.0.4
ORmozillabugzillaMatch3.0.5
ORmozillabugzillaMatch3.0.6
ORmozillabugzillaMatch3.0.7
ORmozillabugzillaMatch3.0.8
ORmozillabugzillaMatch3.1.1
ORmozillabugzillaMatch3.1.2
ORmozillabugzillaMatch3.1.3
ORmozillabugzillaMatch3.1.4
ORmozillabugzillaMatch3.2
ORmozillabugzillaMatch3.2rc1
ORmozillabugzillaMatch3.2rc2
ORmozillabugzillaMatch3.2.1
ORmozillabugzillaMatch3.2.2
ORmozillabugzillaMatch3.2.3
ORmozillabugzillaMatch3.2.4
ORmozillabugzillaMatch3.3.1
ORmozillabugzillaMatch3.3.2
ORmozillabugzillaMatch3.3.3
ORmozillabugzillaMatch3.3.4
ORmozillabugzillaMatch3.4
ORmozillabugzillaMatch3.4rc1
ORmozillabugzillaMatch3.4.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | bugzilla | 2.23.4 | cpe:2.3:a:mozilla:bugzilla:2.23.4:*:*:*:*:*:*:* |
| mozilla | bugzilla | 3.0 | cpe:2.3:a:mozilla:bugzilla:3.0:*:*:*:*:*:*:* |
| mozilla | bugzilla | 3.0 | cpe:2.3:a:mozilla:bugzilla:3.0:rc1:*:*:*:*:*:* |
| mozilla | bugzilla | 3.0.1 | cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:* |
| mozilla | bugzilla | 3.0.2 | cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:* |
| mozilla | bugzilla | 3.0.3 | cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:* |
| mozilla | bugzilla | 3.0.4 | cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:* |
| mozilla | bugzilla | 3.0.5 | cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:* |
| mozilla | bugzilla | 3.0.6 | cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:* |
| mozilla | bugzilla | 3.0.7 | cpe:2.3:a:mozilla:bugzilla:3.0.7:*:*:*:*:*:*:* |
Related
openvas
openvas
Debian Security Advisory DSA 1913-1 (bugzilla)
2009-10-27 00:00:00
Debian: Security Advisory (DSA-1913-1)
2009-10-27 00:00:00
ubuntucve
ubuntucve
CVE-2009-3165
2009-09-15 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1913-1] New bugzilla packages fix SQL injection
2009-10-19 00:00:00
prion
prion
Sql injection
2009-09-15 22:30:00
cve
cve
CVE-2009-3165
2009-09-15 22:30:00
nessus
nessus
Debian DSA-1913-1 : bugzilla - SQL injection vulnerability
2010-02-24 00:00:00
Fedora 11 : bugzilla-3.2.5-1.fc11 (2009-9554)
2009-09-21 00:00:00
Fedora 10 : bugzilla-3.2.5-1.fc10 (2009-9550)
2009-09-21 00:00:00
debian
debian
[SECURITY] [DSA 1913-1] New bugzilla packages fix SQL injection
2009-10-17 23:28:49
cvelist
cvelist
CVE-2009-3165
2009-09-15 22:00:00
seebug
seebug
Mozilla Bugzilla Bug.create()和Bug.search()函数SQL注入漏洞
2009-09-16 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: bugzilla-3.2.5-1.fc11
2009-09-19 00:06:52
[SECURITY] Fedora 10 Update: bugzilla-3.2.5-1.fc10
2009-09-19 00:11:57
[SECURITY] Fedora 11 Update: bugzilla-3.2.6-2.fc11
2010-02-09 05:10:39
freebsd
freebsd
bugzilla -- two SQL injections, sensitive data exposure
2009-09-11 00:00:00
gentoo
gentoo
Bugzilla: Multiple vulnerabilities
2010-06-04 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.2
Confidence
Low
EPSS
0.001
Percentile
51.1%
Related for NVD:CVE-2009-3165