CVE-2004-0702 | BDVDB-2026-6628 Detail

Description#

DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/16673
http://www.securityfocus.com/bid/10698
http://marc.info/?l=bugtraq&m=108965446813639&w=2

Exploit#

No public exploit known

History#

Version 12004-07-21Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.