Test ID:	1.3.6.1.4.1.25623.1.0.100482
Category:	Web application abuses
Title:	Bugzilla Directory Access Information Disclosure Vulnerability
Summary:	Bugzilla is prone to an information disclosure vulnerability.;;Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks.;;Versions prior to Bugzilla 3.0.11, 3.2.6, 3.4.5, and 3.5.3 are affected.
Description:	Summary: Bugzilla is prone to an information disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. Versions prior to Bugzilla 3.0.11, 3.2.6, 3.4.5, and 3.5.3 are affected. Solution: Updates are available. Please see the references for details. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3989 BugTraq ID: 38025 http://www.securityfocus.com/bid/38025 Bugtraq: 20100201 Security Advisory for Bugzilla 3.0.10, 3.2.5, 3.4.4, and 3.5.2 (Google Search) http://www.securityfocus.com/archive/1/509282/100/0/threaded http://secunia.com/advisories/38443 http://www.vupen.com/english/advisories/2010/0261 XForce ISS Database: bugzilla-files-info-disclosure(56003) https://exchange.xforce.ibmcloud.com/vulnerabilities/56003
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.