|
|
>> Bugzilla Multiple Cross Site Scripting and Information Disclosure Vulnerabilities
|
Multiple vulnerabilities have been identified in Bugzilla, which could be exploited by remote attackers to execute arbitrary scripting code, disclose sensitive information, or bypass security restrictions.
The first issue is due to input validation errors when displaying malformed page headers, descriptions of products, components, and other items, which could be exploited by malicious users and administrators to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
The second flaw is due to an error when viewing attachments in "diff" mode, which could allow users who are not members of "insidergroup" to read the descriptions of all attachments.
The third issue is due to an error where the "deadline" field is exposed in the XML format of a bug to all users.
The fourth vulnerability is due to errors in the administrative interface that does not validate certain parameters supplied via HTTP POST and GET requests, which could be exploited by malicious people to manipulate certain information via cross-site request forgery attacks.
The fifth flaw is due to input validation errors in the "showdependencygraph.cgi" script, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.
Affected Products
Bugzilla versions 2.x
Solution
Upgrade to Bugzilla version 2.18.6, 2.20.3, 2.22.1, or 2.23.3 :
http://www.bugzilla.org/download/
References
http://www.vupen.com/english/advisories/2006/4035
http://www.bugzilla.org/security/2.18.5/
Credits
Vulnerabilities reported by Frédéric Buclin, Gervase Markham, Josh "timeless" Soref, Gavin Shelley, and Max Kanat-Alexander.
ChangeLog
2006-10-16 : Initial release
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
