PT-2003-1403 · Mozilla · Bonsai Mozilla Cvs Query Tool

Stan Bubrouski · Published 2003-03-26 · Updated 2017-07-11 · CVE-2003-0153

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: bonsai Mozilla CVS query tool (affected versions not specified)

Description: The bonsai Mozilla CVS query tool has an issue where it leaks the absolute pathname of the tool in certain error messages. This occurs in error messages generated by cvslog.cgi, cvsview2.cgi, or multidiff.cgi.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-0153

DSA-265

Affected Products

Bonsai Mozilla Cvs Query Tool

References · 7

• 🔥 https://exploit-db.com/exploits/21730 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-0153 · Security Note
• http://debian.org/security/2003/dsa-265 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=102980129101054&w=2 · Note
• http://securityfocus.com/bid/5517 · Note
• http://bugzilla.mozilla.org/show_bug.cgi?id=187230 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9921 · Note