CVE-2003-0154: XSS
First published: Wed Mar 26 2003(Updated: )
Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Bonsai | =1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2003/dsa-265
- http://www.securityfocus.com/bid/5516
- http://bugzilla.mozilla.org/show_bug.cgi?id=163573
- http://bugzilla.mozilla.org/show_bug.cgi?id=146244
- http://www.iss.net/security_center/static/9920.php
- http://bugzilla.mozilla.org/attachment.cgi?id=95950&action=view
- http://bugzilla.mozilla.org/attachment.cgi?id=95985&action=view
- http://marc.info/?l=bugtraq&m=102980129101054&w=2
Frequently Asked Questions
What is the severity of CVE-2003-0154?
CVE-2003-0154 is considered a high severity vulnerability due to its potential for remote code execution through cross-site scripting.
How do I fix CVE-2003-0154?
To fix CVE-2003-0154, update Mozilla Bonsai to version 1.3 or apply relevant patches provided by your software vendor.
Which versions of Mozilla Bonsai are affected by CVE-2003-0154?
CVE-2003-0154 affects version 1.3 of Mozilla Bonsai.
What types of attacks can be performed using CVE-2003-0154?
CVE-2003-0154 can be exploited to execute arbitrary web scripts, leading to potential data theft or unauthorized actions on behalf of the user.
Is CVE-2003-0154 a cross-site scripting vulnerability?
Yes, CVE-2003-0154 specifically involves cross-site scripting (XSS) vulnerabilities in the Bonsai CVS query tool.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/remedy
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/mozilla
- canonical/mozilla bonsai
- version/mozilla bonsai/1.3