CVE-2003-1046
First published: Thu Jun 03 2004(Updated: )
describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Bugzilla | =2.16.1 | |
| Mozilla Bugzilla | =2.16.2 | |
| Mozilla Bugzilla | =2.17.4 | |
| Mozilla Bugzilla | =2.10 | |
| Mozilla Bugzilla | =2.17.1 | |
| Mozilla Bugzilla | =2.16 | |
| Mozilla Bugzilla | =2.14.2 | |
| Mozilla Bugzilla | =2.14.3 | |
| Mozilla Bugzilla | =2.14.4 | |
| Mozilla Bugzilla | =2.12 | |
| Mozilla Bugzilla | =2.14 | |
| Mozilla Bugzilla | =2.8 | |
| Mozilla Bugzilla | =2.17.3 | |
| Mozilla Bugzilla | =2.14.5 | |
| Mozilla Bugzilla | =2.4 | |
| Mozilla Bugzilla | =2.6 | |
| Mozilla Bugzilla | =2.14.1 | |
| Mozilla Bugzilla | =2.16.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2003-1046?
CVE-2003-1046 has a moderate severity rating due to its potential to expose restricted component descriptions.
How do I fix CVE-2003-1046?
To fix CVE-2003-1046, upgrade Bugzilla to a version that includes the security patch addressing this vulnerability.
What versions of Bugzilla are affected by CVE-2003-1046?
CVE-2003-1046 affects Bugzilla versions 2.10, 2.14, 2.16, 2.17.1, 2.17.3, and 2.17.4.
Can CVE-2003-1046 be exploited remotely?
Yes, CVE-2003-1046 can be exploited remotely by unauthorized users to access restricted component information.
What kind of access does CVE-2003-1046 allow?
CVE-2003-1046 allows attackers to list component descriptions for products they should not have access to.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- vendor/mozilla
- canonical/mozilla bugzilla
- version/mozilla bugzilla/2.16.1
- version/mozilla bugzilla/2.16.2
- version/mozilla bugzilla/2.17.4
- version/mozilla bugzilla/2.10
- version/mozilla bugzilla/2.17.1
- version/mozilla bugzilla/2.16
- version/mozilla bugzilla/2.14.2
- version/mozilla bugzilla/2.14.3
- version/mozilla bugzilla/2.14.4
- version/mozilla bugzilla/2.12
- version/mozilla bugzilla/2.14
- version/mozilla bugzilla/2.8
- version/mozilla bugzilla/2.17.3
- version/mozilla bugzilla/2.14.5
- version/mozilla bugzilla/2.4
- version/mozilla bugzilla/2.6
- version/mozilla bugzilla/2.14.1
- version/mozilla bugzilla/2.16.3