CVE-2010-2756

Summary

Search.pm in Bugzilla 2.19.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 allows remote attackers to determine the group memberships of arbitrary users via vectors involving the Search interface, boolean charts, and group-based pronouns.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.vupen.com/english/advisories/2010/2035
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html
• http://secunia.com/advisories/40892
• https://bugzilla.redhat.com/show_bug.cgi?id=623423
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html
• http://www.securityfocus.com/bid/42275
• https://bugzilla.mozilla.org/show_bug.cgi?id=417048
• http://www.bugzilla.org/security/3.2.7/
• http://secunia.com/advisories/41128
• http://www.vupen.com/english/advisories/2010/2205

References

• http://www.vupen.com/english/advisories/2010/2035
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html
• http://secunia.com/advisories/40892
• https://bugzilla.redhat.com/show_bug.cgi?id=623423
• http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html
• http://www.securityfocus.com/bid/42275
• https://bugzilla.mozilla.org/show_bug.cgi?id=417048
• http://www.bugzilla.org/security/3.2.7/
• http://secunia.com/advisories/41128
• http://www.vupen.com/english/advisories/2010/2205

• ←Previous
• Next→