Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.11553
Category:CGI abuses
Title:Bugzilla XSS and insecure temporary filenames
Summary:NOSUMMARY
Description:Description:

The remote Bugzilla bug tracking system, according to its
version number, is vulnerable to various flaws that may
let an attacker perform cross site scripting attacks or
even delete local file files (provided he has an account
on the remote host).

Solution : Upgrade to 2.16.3 or 2.17.4
Risk factor : Medium

Cross-Ref: BugTraq ID: 7412
Common Vulnerability Exposure (CVE) ID: CVE-2003-0603
http://www.securityfocus.com/bid/7412
Conectiva Linux advisory: CLA-2003:653
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653
http://www.bugzilla.org/security/2.16.2/
CopyrightThis script is Copyright (C) 2003 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.