CVE-2002-0809 | BDVDB-2026-5277 Detail

Description#

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/4964
http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html
http://bugzilla.mozilla.org/show_bug.cgi?id=148674
http://www.iss.net/security_center/static/10141.php
http://www.redhat.com/support/errata/RHSA-2002-109.html

Exploit#

No public exploit known

History#

Version 12003-04-02Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.