Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-0707
HistoryJul 27, 2004 - 12:00 a.m.

CVE-2004-0707

2004-07-2700:00:00
ubuntu.com
ubuntu.com
11

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

53.2%

SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before
2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to
grant membership to any group to execute arbitrary SQL.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchbugzilla< 2.20-1UNKNOWN
ubuntu6.10noarchbugzilla< 2.20-1UNKNOWN
ubuntu7.04noarchbugzilla< 2.20-1UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.002

Percentile

53.2%

Related for UB:CVE-2004-0707