CVE-2003-1044: High severity Bugzilla vulnerability
editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned with the original group ID.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1044?
CVE-2003-1044 is considered a moderate severity vulnerability due to improper privilege management.
How do I fix CVE-2003-1044?
To fix CVE-2003-1044, upgrade to Bugzilla version 2.18 or later which addresses this vulnerability.
What software versions are affected by CVE-2003-1044?
CVE-2003-1044 affects Bugzilla versions 2.16.3 and earlier.
What impact does CVE-2003-1044 have on Bugzilla?
CVE-2003-1044 allows unauthorized users to perform additions to groups due to residual privileges after group deletion.
Is CVE-2003-1044 exploited in the wild?
There is no widely reported evidence of CVE-2003-1044 being actively exploited in the wild, but it poses a security risk.