CVE-2003-0012: Low severity Bugzilla vulnerability
The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0012?
CVE-2003-0012 is considered a moderate severity vulnerability due to the potential for local users to modify or delete important data.
How do I fix CVE-2003-0012?
To fix CVE-2003-0012, you should upgrade Bugzilla to versions 2.14.5, 2.16.2, or 2.17.3 or later.
What versions of Bugzilla are affected by CVE-2003-0012?
CVE-2003-0012 affects Bugzilla versions 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3.
Can local users exploit CVE-2003-0012?
Yes, local users can exploit CVE-2003-0012 due to the world-writable permissions set on the data/mining directory.
Is CVE-2003-0012 still relevant today?
While CVE-2003-0012 is an older vulnerability, it is still relevant for systems running affected versions of Bugzilla.