PT-2003-1740 · Mozilla · Bugzilla

Jouni Heikniemi · Publicado 2003-07-29 · Atualizado 2008-09-05 · CVE-2003-0603

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Bugzilla versions 2.16.x through 2.16.2 Bugzilla versions 2.17.x through 2.17.3 Bugzilla versions prior to 2.16.x

Description: The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files created in directories with group-writable or world-writable permissions.

Recommendations: For Bugzilla versions 2.16.x through 2.16.2, update to version 2.16.3 or later. For Bugzilla versions 2.17.x through 2.17.3, update to version 2.17.4 or later. For Bugzilla versions prior to 2.16.x, update to version 2.16.3 or later.

Correção

Identificadores relacionados

CVE-2003-0603

Produtos afetados

Bugzilla

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2003-0603 · Nota de Segurança
• http://bugzilla.org/security/2.16.2 · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0603 · Nota
• http://securityfocus.com/bid/7412 · Aviso do Fabricante