CVE-2005-3138 | BDVDB-2026-12666 Detail

Description#

Bugzilla 2.18rc1 through 2.18.3, 2.19 through 2.20rc2, and 2.21 allows remote attackers to obtain sensitive information such as the list of installed products via the config.cgi file, which is accessible even when the requirelogin parameter is set.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/17030/
https://exchange.xforce.ibmcloud.com/vulnerabilities/22490
http://www.bugzilla.org/security/2.18.4/
http://marc.info/?l=bugtraq&m=112818466125484&w=2
http://www.securityfocus.com/bid/14995

Exploit#

No public exploit known

History#

Version 12005-10-05Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.