CVE-2006-5454

2006-10-2300:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.061

Percentile

93.6%

JSON

Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1,
and 2.23.x before 2.23.3 allow remote attackers to obtain (1) the
description of arbitrary attachments by viewing the attachment in “diff”
mode in attachment.cgi, and (2) the deadline field by viewing the XML
format of the bug in show_bug.cgi.

OSVersionArchitecturePackageVersionFilename
ubuntu7.04noarchbugzilla< 2.22.1-2UNKNOWN
ubuntu7.10noarchbugzilla< 2.22.1-2UNKNOWN
ubuntu8.04noarchbugzilla< 2.22.1-2UNKNOWN
ubuntu8.10noarchbugzilla< 2.22.1-2UNKNOWN
ubuntu9.04noarchbugzilla< 2.22.1-2UNKNOWN
ubuntu9.10noarchbugzilla< 2.22.1-2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.04	noarch	bugzilla	< 2.22.1-2	UNKNOWN
ubuntu	7.10	noarch	bugzilla	< 2.22.1-2	UNKNOWN
ubuntu	8.04	noarch	bugzilla	< 2.22.1-2	UNKNOWN
ubuntu	8.10	noarch	bugzilla	< 2.22.1-2	UNKNOWN
ubuntu	9.04	noarch	bugzilla	< 2.22.1-2	UNKNOWN
ubuntu	9.10	noarch	bugzilla	< 2.22.1-2	UNKNOWN