PT-2015-6605 · Mozilla · Bugzilla

Netanel Rubin · Published 2015-09-14 · Updated 2016-12-22 · CVE-2015-4499

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.x through 4.2.14 Bugzilla versions 4.3.x through 4.3.x before 4.4.10 Bugzilla versions 4.4.x through 4.4.9 Bugzilla versions 5.x through 5.0.0

Description The issue mishandles long e-mail addresses during account registration, allowing remote attackers to obtain default privileges for an arbitrary domain name by placing that name in a substring of an address. This can be demonstrated by the truncation of an @mozilla.com.example.com address to an @mozilla.com address.

Recommendations For Bugzilla versions 2.x through 4.2.14, update to version 4.2.15 or later. For Bugzilla versions 4.3.x through 4.3.x before 4.4.10, update to version 4.4.10 or later. For Bugzilla versions 4.4.x through 4.4.9, update to version 4.4.10 or later. For Bugzilla versions 5.x through 5.0.0, update to version 5.0.1 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-4499

MGASA-2016-0006

Affected Products

Bugzilla

References · 20

• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1202447 · Exploit
• http://seclists.org/bugtraq/2015/Sep/48 · Patch
• https://osv.dev/vulnerability/MGASA-2016-0006 · Vendor Advisory
• http://seclists.org/bugtraq/2015/Sep/49 · Patch
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169983.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-4499 · Security Note
• https://lists.fedoraproject.org/pipermail/package-announce/2016-January/175113.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169946.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168725.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0006.html · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4499 · Note
• https://bugzilla.org/releases/4.4.11/release-notes.html · Note
• http://packetstormsecurity.com/files/133578/Bugzilla-Unauthorized-Account-Creation.html · Note
• http://lwn.net/Vulnerabilities/671083 · Note
• http://securitytracker.com/id/1033542 · Note