Mozilla Bugzilla Multiple Input Validation and Information disclosure Vulnerabilities
BID:20538
Info
Mozilla Bugzilla Multiple Input Validation and Information disclosure Vulnerabilities
| Bugtraq ID: | 20538 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-5453 CVE-2006-5454 CVE-2006-5455 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 16 2006 12:00AM |
| Updated: | Nov 15 2007 12:39AM |
| Credit: | Discovery of these issues is credited to Frédéric Buclin, Dave Miller, Gervase Markham, Gavin Shelley, Max Kanat-Alexander, Myk Melez, Josh "timeless" Soref, Olav Vitters and Adam Merrifield. |
| Vulnerable: |
Mozilla Bugzilla 2.23.2 Mozilla Bugzilla 2.21.2 Mozilla Bugzilla 2.21.1 Mozilla Bugzilla 2.21 Mozilla Bugzilla 2.20.2 Mozilla Bugzilla 2.20.1 Mozilla Bugzilla 2.20 rc2 Mozilla Bugzilla 2.20 rc1 Mozilla Bugzilla 2.19.3 Mozilla Bugzilla 2.19.2 Mozilla Bugzilla 2.19.1 Mozilla Bugzilla 2.19 Mozilla Bugzilla 2.18.5 Mozilla Bugzilla 2.18.4 Mozilla Bugzilla 2.18.3 Mozilla Bugzilla 2.18.2 Mozilla Bugzilla 2.18.1 Mozilla Bugzilla 2.18 rc3 Mozilla Bugzilla 2.18 rc2 Mozilla Bugzilla 2.18 rc1 Mozilla Bugzilla 2.17.7 Mozilla Bugzilla 2.17.6 Mozilla Bugzilla 2.17.5 Mozilla Bugzilla 2.17.4 Mozilla Bugzilla 2.17.3 Mozilla Bugzilla 2.17.1 Mozilla Bugzilla 2.17 Mozilla Bugzilla 2.16.11 Mozilla Bugzilla 2.16.10 Mozilla Bugzilla 2.16.9 Mozilla Bugzilla 2.16.8 Mozilla Bugzilla 2.16.7 Mozilla Bugzilla 2.16.6 Mozilla Bugzilla 2.16.5 Mozilla Bugzilla 2.16.4 Mozilla Bugzilla 2.16.3 Mozilla Bugzilla 2.16.2 Mozilla Bugzilla 2.16.1 Mozilla Bugzilla 2.16 .10 Mozilla Bugzilla 2.16 Mozilla Bugzilla 2.14.5 Mozilla Bugzilla 2.14.4 Mozilla Bugzilla 2.14.3 Mozilla Bugzilla 2.14.2 Mozilla Bugzilla 2.14.1 Mozilla Bugzilla 2.14 Mozilla Bugzilla 2.12 Mozilla Bugzilla 2.10 Mozilla Bugzilla 2.9 Mozilla Bugzilla 2.8 Mozilla Bugzilla 2.6 Mozilla Bugzilla 2.4 Mozilla Bugzilla 2.22 RC1 Mozilla Bugzilla 2.22 Mozilla Bugzilla 2.20 Gentoo Linux |
| Not Vulnerable: |
Mozilla Bugzilla 2.23.3 Mozilla Bugzilla 2.22.1 Mozilla Bugzilla 2.20.3 Mozilla Bugzilla 2.18.6 |
Discussion
Mozilla Bugzilla Multiple Input Validation and Information disclosure Vulnerabilities
Bugzilla is affected by multiple input-validation and information-disclosure vulnerabilities because the application fails to properly sanitize user-supplied input and to protect sensitive information from unauthorized users.
An attacker can leverage these issues to access attachment and deadline information that are marked private or are otherwise protected and to conduct cross-site scripting and HTML-injection attacks. Exploiting these input-validation issues may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
Versions 2.18.5, 2.20.2, 2.22, and 2.23.2 are affected by these vulnerabilities.
Bugzilla is affected by multiple input-validation and information-disclosure vulnerabilities because the application fails to properly sanitize user-supplied input and to protect sensitive information from unauthorized users.
An attacker can leverage these issues to access attachment and deadline information that are marked private or are otherwise protected and to conduct cross-site scripting and HTML-injection attacks. Exploiting these input-validation issues may allow attackers to steal cookie-based authentication credentials and to launch other attacks.
Versions 2.18.5, 2.20.2, 2.22, and 2.23.2 are affected by these vulnerabilities.
Exploit / POC
Mozilla Bugzilla Multiple Input Validation and Information disclosure Vulnerabilities
Attackers can exploit these issues via a browser.
Attackers can exploit these issues via a browser.
Solution / Fix
Mozilla Bugzilla Multiple Input Validation and Information disclosure Vulnerabilities
Solution:
The vendor released fixes to address these issues. Please see the references for more information.
Mozilla Bugzilla 2.22
Mozilla Bugzilla 2.16.7
Mozilla Bugzilla 2.18.5
Mozilla Bugzilla 2.20.2
Mozilla Bugzilla 2.23.2
Solution:
The vendor released fixes to address these issues. Please see the references for more information.
Mozilla Bugzilla 2.22
-
Mozilla bugzilla-2.22.1.tar.gz
http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-2.22.1.tar.gz
Mozilla Bugzilla 2.16.7
-
Debian bugzilla-doc_2.16.7-7sarge2_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/b/bugzilla/bugzilla-doc_2 .16.7-7sarge2_all.deb -
Debian bugzilla_2.16.7-7sarge2_all.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/b/bugzilla/bugzilla_2.16. 7-7sarge2_all.deb
Mozilla Bugzilla 2.18.5
-
Mozilla bugzilla-2.18.6.tar.gz
http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-2.18.6.tar.gz
Mozilla Bugzilla 2.20.2
-
Mozilla bugzilla-2.20.3.tar.gz
http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-2.20.3.tar.gz
Mozilla Bugzilla 2.23.2
-
Mozilla bugzilla-2.23.3.tar.gz
http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-2.23.3.tar.gz
References
Mozilla Bugzilla Multiple Input Validation and Information disclosure Vulnerabilities
References:
References:
- Bugzilla Homepage (Mozilla)
- Security Advisory for Bugzilla 2.18.5, 2.20.2, 2.22, and 2.23.2 (Max Kanat-Alexander)
- 2.18.5, 2.20.2, 2.22, and 2.23.2 Security Advisory (Bugzilla Team)