CVE ID:	CVE-2010-2758
Description:	Bugzilla 2.17.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 generates different error messages depending on whether a product exists, which makes it easier for remote attackers to guess product names via unspecified use of the (1) Reports or (2) Duplicates page.
Test IDs:	1.3.6.1.4.1.25623.1.0.67928   1.3.6.1.4.1.25623.1.0.67926   1.3.6.1.4.1.25623.1.0.67924   1.3.6.1.4.1.25623.1.0.68000
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2758 BugTraq ID: 42275 http://www.securityfocus.com/bid/42275 http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html http://secunia.com/advisories/40892 http://secunia.com/advisories/41128 http://www.vupen.com/english/advisories/2010/2035 http://www.vupen.com/english/advisories/2010/2205