PT-2003-1310 · Mozilla · Bugzilla

David Miller · Publicado 2003-01-17 · Atualizado 2016-10-18 · CVE-2003-0012

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.14.x through 2.14.4 Bugzilla versions 2.16.x through 2.16.1 Bugzilla versions 2.17.x through 2.17.2

Description The issue allows local users to modify or delete data due to world-writable permissions being set for the data/mining directory by the data collection script.

Recommendations For versions 2.14.x through 2.14.4, update to version 2.14.5 or later. For versions 2.16.x through 2.16.1, update to version 2.16.2 or later. For versions 2.17.x through 2.17.2, update to version 2.17.3 or later.

Correção

Identificadores relacionados

CVE-2003-0012

DSA-230

Produtos afetados

Bugzilla

Referências · 7

• http://debian.org/security/2003/dsa-230 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2003-012.html · Aviso do Fabricante
• http://iss.net/security_center/static/10971.php · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0012 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-0012 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=104154319200399&w=2 · Nota
• http://securityfocus.com/bid/6502 · Nota