Bugzilla Group Creation With Elevated Privileges Vulnerability

Bugtraq ID:	5843
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Oct 01 2002 12:00AM
Updated:	Oct 01 2002 12:00AM
Credit:	This vulnerability was reported in a Bugzilla Security Advisory.
Vulnerable:	Mozilla Bugzilla 2.16 - Mandriva Linux Mandrake 9.0 - Mandriva Linux Mandrake 9.0 Mozilla Bugzilla 2.14.3 Mozilla Bugzilla 2.14.2 + Debian Linux 3.0 sparc + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 s/390 + Debian Linux 3.0 s/390 + Debian Linux 3.0 s/390 + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 ppc + Debian Linux 3.0 ppc + Debian Linux 3.0 ppc + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mipsel + Debian Linux 3.0 mipsel + Debian Linux 3.0 mipsel + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 mips + Debian Linux 3.0 mips + Debian Linux 3.0 mips + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 m68k + Debian Linux 3.0 m68k + Debian Linux 3.0 m68k + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 hppa + Debian Linux 3.0 hppa + Debian Linux 3.0 hppa + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 arm + Debian Linux 3.0 arm + Debian Linux 3.0 arm + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 alpha + Debian Linux 3.0 alpha + Debian Linux 3.0 alpha + Debian Linux 3.0 alpha + Debian Linux 3.0 + Debian Linux 3.0 + Debian Linux 3.0 + Debian Linux 3.0 + Debian Linux 3.0 Mozilla Bugzilla 2.14.1 Mozilla Bugzilla 2.14 - Redhat Linux 7.1 - Redhat Linux 7.1 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 7.0 - Redhat Linux 7.0
Not Vulnerable:	Mozilla Bugzilla 2.16.1 Mozilla Bugzilla 2.14.4

Bugzilla Group Creation With Elevated Privileges Vulnerability

Solution:
Fixes are available:


Mozilla Bugzilla 2.14

• Mozilla bugzilla-2.14.4.tar.gz
  http://ftp.mozilla.org/pub/webtools/bugzilla-2.14.4.tar.gz

Mozilla Bugzilla 2.14.1

• Mozilla bugzilla-2.14.4.tar.gz
  http://ftp.mozilla.org/pub/webtools/bugzilla-2.14.4.tar.gz

Mozilla Bugzilla 2.14.2

• Debian bugzilla-doc_2.14.2-0woody2_all.deb
  Debian GNU/Linux 3.0 architecture independent package.
  http://security.debian.org/pool/updates/main/b/bugzilla/bugzilla-doc_2 .14.2-0woody2_all.deb


• Debian bugzilla_2.14.2-0woody2_all.deb
  Debian GNU/Linux 3.0 architecture independent package.
  http://security.debian.org/pool/updates/main/b/bugzilla/bugzilla_2.14. 2-0woody2_all.deb


• Mozilla bugzilla-2.14.4.tar.gz
  http://ftp.mozilla.org/pub/webtools/bugzilla-2.14.4.tar.gz

Mozilla Bugzilla 2.14.3

• Mozilla bugzilla-2.14.4.tar.gz
  http://ftp.mozilla.org/pub/webtools/bugzilla-2.14.4.tar.gz

Mozilla Bugzilla 2.16

• Mozilla bugzilla-2.16.1.tar.gz
  http://ftp.mozilla.org/pub/webtools/bugzilla-2.16.1.tar.gz

Bugzilla Group Creation With Elevated Privileges Vulnerability

References:

• Bugzilla Homepage (Mozilla)