CVE-2003-1043: SQL Injection
SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1043?
CVE-2003-1043 is considered a high severity vulnerability due to its potential to allow unauthorized SQL commands.
How do I fix CVE-2003-1043?
To fix CVE-2003-1043, upgrade Bugzilla to a version later than 2.17.4 or apply appropriate patches provided by the Bugzilla security team.
Who is affected by CVE-2003-1043?
CVE-2003-1043 affects authenticated users with editkeywords privileges on Bugzilla versions 2.16.3 and earlier as well as specific versions up to 2.17.4.
What types of attacks can CVE-2003-1043 enable?
CVE-2003-1043 allows attackers to execute arbitrary SQL commands, potentially compromising the integrity of the Bugzilla database.
Is user authentication sufficient to mitigate CVE-2003-1043?
No, user authentication alone is not sufficient to mitigate CVE-2003-1043 as it specifically exploits the privileges of authenticated users.