post_bug.cgi in Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to "enter bugs into products that are closed for bug entry" by modifying the URL to specify the name of the product.
References
| Link | Resource |
|---|---|
| http://marc.info/?l=bugtraq&m=111592031902962&w=2 | |
| http://secunia.com/advisories/15338 | Patch Vendor Advisory |
| http://www.bugzilla.org/security/2.16.8/ | Exploit Patch Vendor Advisory |
| http://www.osvdb.org/16426 | Patch Vendor Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=287109 | Exploit Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/42797 | |
| http://marc.info/?l=bugtraq&m=111592031902962&w=2 | |
| http://secunia.com/advisories/15338 | Patch Vendor Advisory |
| http://www.bugzilla.org/security/2.16.8/ | Exploit Patch Vendor Advisory |
| http://www.osvdb.org/16426 | Patch Vendor Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=287109 | Exploit Patch Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/42797 |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://marc.info/?l=bugtraq&m=111592031902962&w=2 - | |
| References | () http://secunia.com/advisories/15338 - Patch, Vendor Advisory | |
| References | () http://www.bugzilla.org/security/2.16.8/ - Exploit, Patch, Vendor Advisory | |
| References | () http://www.osvdb.org/16426 - Patch, Vendor Advisory | |
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=287109 - Exploit, Patch, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/42797 - |
Information
Published : 2005-05-12 04:00
Updated : 2024-11-20 23:57
NVD link : CVE-2005-1564
Mitre link : CVE-2005-1564
CVE.ORG link : CVE-2005-1564
JSON object : View
Products Affected
mozilla
- bugzilla
CWE