Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.100749
Categoría:Web application abuses
Título:Bugzilla Multiple Vulnerabilities
Resumen:Bugzilla is prone to the following vulnerabilities:;;1. A security bypass issue.;;2. Multiple information disclosure vulnerabilities.;;3. A denial-of-service vulnerability.;;Successfully exploiting these issues may allow an attacker to bypass certain security restrictions, obtain;sensitive information or cause the affected application to crash, denying service to legitimate users.;;The following versions are vulnerable:;;4.x and 3.2.x versions prior to 3.2.8, 4.1.x and 3.4.x versions prior to 3.4.8, 4.2.x and 3.6.x versions prior to;3.6.2, 4.3.x versions prior to 3.7.3.
Descripción:Summary:
Bugzilla is prone to the following vulnerabilities:

1. A security bypass issue.

2. Multiple information disclosure vulnerabilities.

3. A denial-of-service vulnerability.

Successfully exploiting these issues may allow an attacker to bypass certain security restrictions, obtain
sensitive information or cause the affected application to crash, denying service to legitimate users.

The following versions are vulnerable:

4.x and 3.2.x versions prior to 3.2.8, 4.1.x and 3.4.x versions prior to 3.4.8, 4.2.x and 3.6.x versions prior to
3.6.2, 4.3.x versions prior to 3.7.3.

Solution:
Updates are available. Please see the references for more information.

CVSS Score:
6.5

CVSS Vector:
AV:N/AC:L/Au:S/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2010-2756
BugTraq ID: 42275
http://www.securityfocus.com/bid/42275
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html
http://secunia.com/advisories/40892
http://secunia.com/advisories/41128
http://www.vupen.com/english/advisories/2010/2035
http://www.vupen.com/english/advisories/2010/2205
Common Vulnerability Exposure (CVE) ID: CVE-2010-2757
Common Vulnerability Exposure (CVE) ID: CVE-2010-2758
Common Vulnerability Exposure (CVE) ID: CVE-2010-2759
CopyrightCopyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.