CVE-2011-2979 | BDVDB-2026-46933 Detail
Description#
Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which allows remote attackers to determine the existence of private group names via a custom search. NOTE: this vulnerability exists because of a CVE-2010-2756 regression.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.osvdb.org/74298
- https://exchange.xforce.ibmcloud.com/vulnerabilities/69166
- http://secunia.com/advisories/45501
- http://www.bugzilla.org/security/3.4.11/
- https://bugzilla.mozilla.org/show_bug.cgi?id=674497
- http://www.osvdb.org/74299
- http://www.debian.org/security/2011/dsa-2322
- http://www.securityfocus.com/bid/49042
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.