Test ID:	1.3.6.1.4.1.25623.1.0.15565
Category:	Web application abuses
Title:	Bugzilla remote arbitrary command execution
Summary:	The remote Bugzilla bug tracking system, according to its version number, is; vulnerable to arbitrary commands execution flaws due to a lack of sanitization of user-supplied data in; process_bug.cgi
Description:	Summary: The remote Bugzilla bug tracking system, according to its version number, is vulnerable to arbitrary commands execution flaws due to a lack of sanitization of user-supplied data in process_bug.cgi Solution: Upgrade at version 2.12 or newer. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0421 BugTraq ID: 1199 http://www.securityfocus.com/bid/1199 Bugtraq: 20000510 Advisory: Unchecked system(blaat $var blaat) call in Bugzilla 2.8 (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-05/0128.html XForce ISS Database: bugzilla-unchecked-system-call Common Vulnerability Exposure (CVE) ID: CVE-2001-0329 @stake Security Advisory: A043001-1 http://www.atstake.com/research/advisories/2001/a043001-1.txt
Copyright	Copyright (C) 2004 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.