PT-2003-1310 · Mozilla · Bugzilla

David Miller · Published 2003-01-17 · Updated 2016-10-18 · CVE-2003-0012

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.14.x through 2.14.4 Bugzilla versions 2.16.x through 2.16.1 Bugzilla versions 2.17.x through 2.17.2

Description The issue allows local users to modify or delete data due to world-writable permissions being set for the data/mining directory by the data collection script.

Recommendations For versions 2.14.x through 2.14.4, update to version 2.14.5 or later. For versions 2.16.x through 2.16.1, update to version 2.16.2 or later. For versions 2.17.x through 2.17.2, update to version 2.17.3 or later.

Fix

Related Identifiers

CVE-2003-0012

DSA-230

Affected Products

Bugzilla

References · 7

• http://debian.org/security/2003/dsa-230 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-012.html · Vendor Advisory
• http://iss.net/security_center/static/10971.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0012 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0012 · Note
• http://marc.info/?l=bugtraq&m=104154319200399&w=2 · Note
• http://securityfocus.com/bid/6502 · Note