CVE-2007-0792
First published: Tue Feb 06 2007(Updated: )
The mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file permissions, which allows remote attackers to obtain the database username and password via a direct request for the localconfig file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Bugzilla | =2.23.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.bugzilla.org/security/2.20.3/
- http://www.securityfocus.com/bid/22380
- http://securitytracker.com/id?1017585
- http://securityreason.com/securityalert/2222
- http://osvdb.org/35862
- http://www.vupen.com/english/advisories/2007/0477
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32252
- http://www.securityfocus.com/archive/1/459025/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-0792?
CVE-2007-0792 is classified as a medium severity vulnerability.
How does CVE-2007-0792 affect Bugzilla 2.23.3?
CVE-2007-0792 allows remote attackers to access sensitive database credentials due to improper configuration of .htaccess permissions.
What are the potential impacts of CVE-2007-0792?
An attacker exploiting CVE-2007-0792 could gain unauthorized access to the database username and password.
How do I fix CVE-2007-0792?
To fix CVE-2007-0792, ensure that the Bugzilla Apache configuration allows .htaccess files to override permissions.
Is Bugzilla 2.23.3 the only version affected by CVE-2007-0792?
Yes, CVE-2007-0792 specifically affects Bugzilla version 2.23.3.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/mozilla
- canonical/mozilla bugzilla
- version/mozilla bugzilla/2.23.3