BugZilla Process_Bug.CGI Comment Spoofing Vulnerability
BID:3793
Info
BugZilla Process_Bug.CGI Comment Spoofing Vulnerability
| Bugtraq ID: | 3793 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 05 2001 12:00AM |
| Updated: | Nov 05 2001 12:00AM |
| Credit: | This issue was originally reported to the Bugzilla Development Homepage as Bugzilla Bug 108385. |
| Vulnerable: |
Mozilla Bugzilla 2.14 Mozilla Bugzilla 2.12 Mozilla Bugzilla 2.10 Mozilla Bugzilla 2.8 Mozilla Bugzilla 2.6 Mozilla Bugzilla 2.4 |
| Not Vulnerable: |
Mozilla Bugzilla 2.14.1 |
Discussion
BugZilla Process_Bug.CGI Comment Spoofing Vulnerability
Bugzilla is the bug tracking software package by the Mozilla project. It can be configured to run on Microsoft Windows and various Unix/Linux platforms.
A vulnerability exists in Bugzilla which may allow a user to add bug comments as any other user. The process_bug.cgi script only checks that a user exists when a bug comment is added, not that the user adding the bug is the one currently logged in.
This may be exploited by saving the add comment form locally and then changing the value of the appropriate form element. The attacker then submits the altered form.
Bugzilla is the bug tracking software package by the Mozilla project. It can be configured to run on Microsoft Windows and various Unix/Linux platforms.
A vulnerability exists in Bugzilla which may allow a user to add bug comments as any other user. The process_bug.cgi script only checks that a user exists when a bug comment is added, not that the user adding the bug is the one currently logged in.
This may be exploited by saving the add comment form locally and then changing the value of the appropriate form element. The attacker then submits the altered form.
Exploit / POC
BugZilla Process_Bug.CGI Comment Spoofing Vulnerability
There is no exploit code required.
There is no exploit code required.
Solution / Fix
BugZilla Process_Bug.CGI Comment Spoofing Vulnerability
Solution:
This issue has been addressed by the vendor is versions 2.14.1 and later. Users are advised to upgrade to the most recent version.
It should also be noted that users who are running version 2.15 checked out of
cvs prior to 15 December 2001 are strongly recommended to use 'cvs update' to obtain the current cvs code.
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.14
Mozilla Bugzilla 2.4
Mozilla Bugzilla 2.6
Mozilla Bugzilla 2.8
Solution:
This issue has been addressed by the vendor is versions 2.14.1 and later. Users are advised to upgrade to the most recent version.
It should also be noted that users who are running version 2.15 checked out of
cvs prior to 15 December 2001 are strongly recommended to use 'cvs update' to obtain the current cvs code.
Mozilla Bugzilla 2.10
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.12
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.14
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.4
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.6
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.8
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
References
BugZilla Process_Bug.CGI Comment Spoofing Vulnerability
References:
References: