PT-2004-1782 · Mozilla · Bugzilla

Published 2004-07-21 · Updated 2017-07-11 · CVE-2004-0702

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.17.1 through 2.17.7

Description The issue allows remote attackers to gain sensitive information because the database password is displayed in an error message when the SQL server is not running.

Recommendations For Bugzilla versions 2.17.1 through 2.17.7, consider updating to a version where this issue is resolved to prevent the exposure of sensitive database passwords.

Fix

Related Identifiers

CVE-2004-0702

Affected Products

Bugzilla

References · 5

• http://securityfocus.com/bid/10698 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0702 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16673 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0702 · Note
• http://marc.info/?l=bugtraq&m=108965446813639&w=2 · Note