CVE-2002-1196 | BDVDB-2026-6897 Detail

Description#

editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set multiple bits.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/5843
http://www.debian.org/security/2002/dsa-173
http://www.iss.net/security_center/static/10233.php
http://bugzilla.mozilla.org/show_bug.cgi?id=167485#c12
http://marc.info/?l=bugtraq&m=103349804226566&w=2

Exploit#

No public exploit known

History#

Version 12004-09-01Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.