BugZilla LongList.CGI SQL Query Manipulation Vulnerability
BID:3805
Info
BugZilla LongList.CGI SQL Query Manipulation Vulnerability
| Bugtraq ID: | 3805 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 11 2001 12:00AM |
| Updated: | Nov 11 2001 12:00AM |
| Credit: | This issue was originally reported to the Bugzilla Development Homepage as Bugzilla Bug 109690. |
| Vulnerable: |
Mozilla Bugzilla 2.14 Mozilla Bugzilla 2.12 Mozilla Bugzilla 2.10 Mozilla Bugzilla 2.8 Mozilla Bugzilla 2.6 Mozilla Bugzilla 2.4 |
| Not Vulnerable: |
Mozilla Bugzilla 2.14.1 |
Discussion
BugZilla LongList.CGI SQL Query Manipulation Vulnerability
Bugzilla is the bug tracking software package by the Mozilla project. It can be configured to run on Microsoft Windows and various Unix/Linux platforms.
A vulnerability exists in the longlist.cgi script for Bugzilla which may allow a user to pass untrusted input to the database. It is possible for a user to manipulate the $bug variable, which is passed in an SQL query. Maliciously crafted input may be supplied by the user which may potentially be used to modify the logic of an existing SQL query.
Bugzilla is the bug tracking software package by the Mozilla project. It can be configured to run on Microsoft Windows and various Unix/Linux platforms.
A vulnerability exists in the longlist.cgi script for Bugzilla which may allow a user to pass untrusted input to the database. It is possible for a user to manipulate the $bug variable, which is passed in an SQL query. Maliciously crafted input may be supplied by the user which may potentially be used to modify the logic of an existing SQL query.
Exploit / POC
BugZilla LongList.CGI SQL Query Manipulation Vulnerability
There is no exploit code required.
There is no exploit code required.
Solution / Fix
BugZilla LongList.CGI SQL Query Manipulation Vulnerability
Solution:
This issue has been addressed by the vendor is versions 2.14.1 and later. Users are advised to upgrade to the most recent version.
It should also be noted that users who are running version 2.15 checked out of
cvs prior to 15 December 2001 are strongly recommended to use 'cvs update' to obtain the current cvs code.
Mozilla Bugzilla 2.10
Mozilla Bugzilla 2.12
Mozilla Bugzilla 2.14
Mozilla Bugzilla 2.4
Mozilla Bugzilla 2.6
Mozilla Bugzilla 2.8
Solution:
This issue has been addressed by the vendor is versions 2.14.1 and later. Users are advised to upgrade to the most recent version.
It should also be noted that users who are running version 2.15 checked out of
cvs prior to 15 December 2001 are strongly recommended to use 'cvs update' to obtain the current cvs code.
Mozilla Bugzilla 2.10
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.12
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.14
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.4
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.6
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
Mozilla Bugzilla 2.8
-
Mozilla bugzilla-LATEST.tar.gz
http://ftp.mozilla.org/pub/webtools/bugzilla-LATEST.tar.gz
References
BugZilla LongList.CGI SQL Query Manipulation Vulnerability
References:
References: