ID de Prueba:	1.3.6.1.4.1.25623.1.0.15565
Categoría:	Web application abuses
Título:	Bugzilla remote arbitrary command execution
Resumen:	The remote Bugzilla bug tracking system, according to its version number, is; vulnerable to arbitrary commands execution flaws due to a lack of sanitization of user-supplied data in; process_bug.cgi
Descripción:	Summary: The remote Bugzilla bug tracking system, according to its version number, is vulnerable to arbitrary commands execution flaws due to a lack of sanitization of user-supplied data in process_bug.cgi Solution: Upgrade at version 2.12 or newer. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0421 BugTraq ID: 1199 http://www.securityfocus.com/bid/1199 Bugtraq: 20000510 Advisory: Unchecked system(blaat $var blaat) call in Bugzilla 2.8 (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-05/0128.html XForce ISS Database: bugzilla-unchecked-system-call Common Vulnerability Exposure (CVE) ID: CVE-2001-0329 @stake Security Advisory: A043001-1 http://www.atstake.com/research/advisories/2001/a043001-1.txt
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.