First published: Wed Jul 21 2004(Updated: )
Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mozilla Bugzilla | =2.17.6 | |
Mozilla Bugzilla | =2.16.1 | |
Mozilla Bugzilla | =2.16.2 | |
Mozilla Bugzilla | =2.17.4 | |
Mozilla Bugzilla | =2.10 | |
Mozilla Bugzilla | =2.17.1 | |
Mozilla Bugzilla | =2.16 | |
Mozilla Bugzilla | =2.14.2 | |
Mozilla Bugzilla | =2.14.3 | |
Mozilla Bugzilla | =2.14.4 | |
Mozilla Bugzilla | =2.6 | |
Mozilla Bugzilla | =2.17.5 | |
Mozilla Bugzilla | =2.17.3 | |
Mozilla Bugzilla | =2.4 | |
Mozilla Bugzilla | =2.16.4 | |
Mozilla Bugzilla | =2.12 | |
Mozilla Bugzilla | =2.8 | |
Mozilla Bugzilla | =2.16.3 | |
Mozilla Bugzilla | =2.14.5 | |
Mozilla Bugzilla | =2.17.7 | |
Mozilla Bugzilla | =2.17 | |
Mozilla Bugzilla | =2.14.1 | |
Mozilla Bugzilla | =2.16.5 | |
Mozilla Bugzilla | =2.14 | |
Mozilla Bugzilla | =2.4 | |
Mozilla Bugzilla | =2.6 | |
Mozilla Bugzilla | =2.8 | |
Mozilla Bugzilla | =2.10 | |
Mozilla Bugzilla | =2.12 | |
Mozilla Bugzilla | =2.14 | |
Mozilla Bugzilla | =2.14.1 | |
Mozilla Bugzilla | =2.14.2 | |
Mozilla Bugzilla | =2.14.3 | |
Mozilla Bugzilla | =2.14.4 | |
Mozilla Bugzilla | =2.14.5 | |
Mozilla Bugzilla | =2.16 | |
Mozilla Bugzilla | =2.16.1 | |
Mozilla Bugzilla | =2.16.2 | |
Mozilla Bugzilla | =2.16.3 | |
Mozilla Bugzilla | =2.16.4 | |
Mozilla Bugzilla | =2.16.5 | |
Mozilla Bugzilla | =2.17 | |
Mozilla Bugzilla | =2.17.1 | |
Mozilla Bugzilla | =2.17.3 | |
Mozilla Bugzilla | =2.17.4 | |
Mozilla Bugzilla | =2.17.5 | |
Mozilla Bugzilla | =2.17.6 | |
Mozilla Bugzilla | =2.17.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0704 has been classified as a moderate severity vulnerability due to the potential exposure of hidden products in Bugzilla.
To fix CVE-2004-0704, upgrade Bugzilla to version 2.16.6 or later, or to version 2.18rc1 or later.
CVE-2004-0704 affects Bugzilla versions 2.10 through 2.17.5.
Yes, CVE-2004-0704 can be exploited remotely by attackers to gain unauthorized access to hidden products.
Yes, CVE-2004-0704 is related to access control issues that allow unauthorized viewing of hidden products.