CVE-2009-3165: SQL Injection
SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3165?
CVE-2009-3165 has been classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2009-3165?
To fix CVE-2009-3165, upgrade Bugzilla to version 3.4.2 or later, which addresses this SQL injection vulnerability.
What systems are affected by CVE-2009-3165?
CVE-2009-3165 affects Bugzilla versions from 2.23.4 up to 3.4.1.
What type of vulnerability is CVE-2009-3165?
CVE-2009-3165 is an SQL injection vulnerability that can be exploited through the Bug.create WebService function.
Can CVE-2009-3165 lead to data breaches?
Yes, CVE-2009-3165 can lead to data breaches as it allows attackers to manipulate and extract sensitive information from the database.