PT-2004-1786 · Mozilla · Bugzilla

Published 2004-07-21 · Updated 2017-07-11 · CVE-2004-0706

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.17.5 through 2.17.7

Description The issue allows local users to view passwords in web server log files because the password is embedded in an image URL.

Recommendations For versions 2.17.5 through 2.17.7, consider restricting access to the web server log files to minimize the risk of password exposure until a fix is available.

Fix

Related Identifiers

CVE-2004-0706

Affected Products

Bugzilla

References · 6

• http://securityfocus.com/bid/10698 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0706 · Security Note
• http://bugzilla.mozilla.org/show_bug.cgi?id=235510 · Note
• http://marc.info/?l=bugtraq&m=108965446813639&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0706 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16669 · Note