CVE-2005-2173 | BDVDB-2026-11237 Detail

Description#

The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via process_bug.cgi.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://securitytracker.com/id?1014428
https://bugzilla.mozilla.org/show_bug.cgi?id=293159
http://www.bugzilla.org/security/2.18.1/

Exploit#

No public exploit known

History#

Version 12005-07-08Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.