CVE-2004-0704: Medium severity Bugzilla vulnerability
Published Jul 21, 2004
·Updated
Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products.
Affected Software
48 affected components
Bugzilla=2.4
Bugzilla=2.6
Bugzilla=2.8
Bugzilla=2.10
Bugzilla=2.12
Bugzilla=2.14
Bugzilla=2.14.1
Bugzilla=2.14.2
Bugzilla=2.14.3
Bugzilla=2.14.4
Bugzilla=2.14.5
Bugzilla=2.16
Bugzilla=2.16.1
Bugzilla=2.16.2
Bugzilla=2.16.3
Bugzilla=2.16.4
Bugzilla=2.16.5
Bugzilla=2.17
Bugzilla=2.17.1
Bugzilla=2.17.3
Bugzilla=2.17.4
Bugzilla=2.17.5
Bugzilla=2.17.6
Bugzilla=2.17.7
Bugzilla=2.17.6
Bugzilla=2.16.1
Bugzilla=2.16.2
Bugzilla=2.17.4
Bugzilla=2.10
Bugzilla=2.17.1
Bugzilla=2.16
Bugzilla=2.14.2
Bugzilla=2.14.3
Bugzilla=2.14.4
Bugzilla=2.6
Bugzilla=2.17.5
Bugzilla=2.17.3
Bugzilla=2.4
Bugzilla=2.16.4
Bugzilla=2.12
Bugzilla=2.8
Bugzilla=2.16.3
Bugzilla=2.14.5
Bugzilla=2.17.7
Bugzilla=2.17
Bugzilla=2.14.1
Bugzilla=2.16.5
Bugzilla=2.14
Remediation
Patch Available
Event History
Jul 21, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0704?
CVE-2004-0704 has been classified as a moderate severity vulnerability due to the potential exposure of hidden products in Bugzilla.
2
How do I fix CVE-2004-0704?
To fix CVE-2004-0704, upgrade Bugzilla to version 2.16.6 or later, or to version 2.18rc1 or later.
3
What versions of Bugzilla are affected by CVE-2004-0704?
CVE-2004-0704 affects Bugzilla versions 2.10 through 2.17.5.
4
Can CVE-2004-0704 be exploited remotely?
Yes, CVE-2004-0704 can be exploited remotely by attackers to gain unauthorized access to hidden products.
5
Is CVE-2004-0704 related to access control issues?
Yes, CVE-2004-0704 is related to access control issues that allow unauthorized viewing of hidden products.