5

CVE-2006-5454

Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote attackers to obtain (1) the description of arbitrary attachments by viewing the attachment in "diff" mode in attachment.cgi, and (2) the deadline field by viewing the XML format of the bug in show_bug.cgi.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Bugzilla Version2.18
Mozilla ≫ Bugzilla Version2.18 Updaterc1
Mozilla ≫ Bugzilla Version2.18 Updaterc2
Mozilla ≫ Bugzilla Version2.18 Updaterc3
Mozilla ≫ Bugzilla Version2.18.1
Mozilla ≫ Bugzilla Version2.18.2
Mozilla ≫ Bugzilla Version2.18.3
Mozilla ≫ Bugzilla Version2.18.4
Mozilla ≫ Bugzilla Version2.18.5
Mozilla ≫ Bugzilla Version2.20
Mozilla ≫ Bugzilla Version2.20 Updaterc1
Mozilla ≫ Bugzilla Version2.20 Updaterc2
Mozilla ≫ Bugzilla Version2.20.1
Mozilla ≫ Bugzilla Version2.20.2
Mozilla ≫ Bugzilla Version2.22
Mozilla ≫ Bugzilla Version2.23
Mozilla ≫ Bugzilla Version2.23.1
Mozilla ≫ Bugzilla Version2.23.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.91% 0.771
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/22409
http://secunia.com/advisories/22790
http://security.gentoo.org/glsa/glsa-200611-04.xml
http://securityreason.com/securityalert/1760
http://www.bugzilla.org/security/2.18.5/
http://www.securityfocus.com/archive/1/448777/100/100/threaded
http://www.securityfocus.com/bid/20538
http://www.vupen.com/english/advisories/2006/4035
http://securitytracker.com/id?1017064
Patch
http://www.osvdb.org/29546
http://www.osvdb.org/29547
https://bugzilla.mozilla.org/show_bug.cgi?id=346086
Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=346564
Patch