PT-2003-1403 · Mozilla · Bonsai Mozilla Cvs Query Tool

Stan Bubrouski · Publicado 2003-03-26 · Atualizado 2017-07-11 · CVE-2003-0153

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: bonsai Mozilla CVS query tool (affected versions not specified)

Description: The bonsai Mozilla CVS query tool has an issue where it leaks the absolute pathname of the tool in certain error messages. This occurs in error messages generated by cvslog.cgi, cvsview2.cgi, or multidiff.cgi.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2003-0153

DSA-265

Produtos afetados

Bonsai Mozilla Cvs Query Tool

Referências · 7

• 🔥 https://exploit-db.com/exploits/21730 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0153 · Nota de Segurança
• http://debian.org/security/2003/dsa-265 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=102980129101054&w=2 · Nota
• http://securityfocus.com/bid/5517 · Nota
• http://bugzilla.mozilla.org/show_bug.cgi?id=187230 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9921 · Nota