CVE-2009-3989 (GCVE-0-2009-3989)
Vulnerability from cvelistv5
Published
2010-02-03 19:00
Modified
2024-08-07 06:45
Severity ?
CWE
  • n/a
Summary
Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt.
References
cve@mitre.orghttp://secunia.com/advisories/38443Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/archive/1/509282/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/38025
cve@mitre.orghttp://www.vupen.com/english/advisories/2010/0261Patch, Vendor Advisory
cve@mitre.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=314871Patch
cve@mitre.orghttps://bugzilla.mozilla.org/show_bug.cgi?id=434801Patch
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/56003
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/38443Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/509282/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/38025
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2010/0261Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.mozilla.org/show_bug.cgi?id=314871Patch
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.mozilla.org/show_bug.cgi?id=434801Patch
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/56003
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:45:50.966Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=314871"
          },
          {
            "name": "bugzilla-files-info-disclosure(56003)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56003"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=434801"
          },
          {
            "name": "ADV-2010-0261",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/0261"
          },
          {
            "name": "38025",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/38025"
          },
          {
            "name": "20100201 Security Advisory for Bugzilla 3.0.10, 3.2.5, 3.4.4, and 3.5.2",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/509282/100/0/threaded"
          },
          {
            "name": "38443",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38443"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-02-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=314871"
        },
        {
          "name": "bugzilla-files-info-disclosure(56003)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56003"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=434801"
        },
        {
          "name": "ADV-2010-0261",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/0261"
        },
        {
          "name": "38025",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/38025"
        },
        {
          "name": "20100201 Security Advisory for Bugzilla 3.0.10, 3.2.5, 3.4.4, and 3.5.2",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/509282/100/0/threaded"
        },
        {
          "name": "38443",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38443"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3989",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=314871",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=314871"
            },
            {
              "name": "bugzilla-files-info-disclosure(56003)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56003"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=434801",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=434801"
            },
            {
              "name": "ADV-2010-0261",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/0261"
            },
            {
              "name": "38025",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/38025"
            },
            {
              "name": "20100201 Security Advisory for Bugzilla 3.0.10, 3.2.5, 3.4.4, and 3.5.2",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/509282/100/0/threaded"
            },
            {
              "name": "38443",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38443"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3989",
    "datePublished": "2010-02-03T19:00:00",
    "dateReserved": "2009-11-19T00:00:00",
    "dateUpdated": "2024-08-07T06:45:50.966Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2009-3989\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2010-02-03T19:30:00.343\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt.\"},{\"lang\":\"es\",\"value\":\"Bugzilla anteriores a v3.0.11, v3.2.x anteriores a v3.2.6, v3.4.x anteriores a v3.4.5, y v3.5.x anteriores a v3.5.3 no bloquea el acceso a ficheros y directorios que son utilizados en instalaciones personalizadas, lo que permite a atacantes remotos conseguir informaci\u00f3n sensible a trav\u00e9s de peticiones para (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"3.0.10\",\"matchCriteriaId\":\"26760A2C-32A4-4494-B2DF-6B291D941105\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC38A53F-60E6-4F7A-A953-C53D141E830D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAFEF951-3FE8-49DD-B3DD-E526D5B52998\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8112FF13-B4CE-4DC7-85B1-C69D975F162B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6E5E379-D475-42F3-B0DC-3D04C1D25566\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"893741D3-062B-45F9-B5A3-1B81058E7FD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8D53B5F-6AEE-4192-B838-E1DA92C59285\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1883A98C-E595-4F3C-87BF-A63393F9F561\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9A4B035-B73E-48E9-BBB9-83219F5D2A95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9452C271-2812-4775-8396-394C642EACFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D351AF2-C0AB-4BB3-8692-677A3025A615\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5877CECA-F758-4F48-B4F4-2C4C1DF01FA0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D63CE086-5872-4594-8F4B-8D812E7EF09C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B900D9A7-913A-4176-90CF-C7C3B09A4261\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B692910E-633D-4A88-B245-56A2B58DD4CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F86EE5DB-442B-4C78-8152-AF1048C6A974\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19B82A1A-56EB-41D5-8619-2A717E3A6ECF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83A0406C-AAF2-4A4C-9567-E21DF1B6C46E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"64434BFC-DDC0-4C7D-B578-472B0610C89E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A30F28D9-B000-4C26-A911-5E1B8A867BF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A123F78-A671-4FB5-AE78-83762E9323C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"28C34288-A326-4B71-99B0-DA9FFD28160F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"73648879-BB08-4BE4-A7FF-1E8DF4E264B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DDB99B2D-CA05-4BC0-BCA4-9B94DF248333\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4869A709-AF79-49BD-A7D2-D48A8D79A085\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"EAC72143-27C3-498F-AFAB-98AE043C0545\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE5E8E72-D493-460D-B5A0-F90C291398A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04885D31-09F3-455F-A1A9-815E182ABCF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92BCD546-2A50-4F43-935C-B68459EE894E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C535BAB7-6146-440B-ADBD-51007585CFC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.6\\\\+:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15E6F17A-7292-4640-A5E6-59865D1CDD7B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E9130B6B-764B-4B83-A2BD-E16013682875\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C7A5111-8729-48DF-B308-7A489BEFA6D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.18.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15E24C39-0E61-4A57-B93F-F0ABF4CEAEEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A749C7AB-6F60-469C-BD95-759205DDA345\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B45F6C27-D89A-42A0-A304-5B0C57D2A9F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"196B7CD8-D721-4CFB-B126-78758128E900\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BEA9DE63-9951-4FE0-80BE-0F6F197303D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B0CEDD02-1CB8-4D5B-B82B-E300B4E39065\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E27101B-7985-4412-A14F-9ED11E4C874C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8A74E8A2-223E-4877-989E-494362B513E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0CAFB45-B115-4492-9919-60223304BB27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC3F7C44-C734-419B-AB62-3AD52554FC7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.20.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"695036D1-994C-451E-8D53-0A345702E4D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2969731-8256-431B-9356-4BC873D98F6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C166E42-9B36-4883-B738-EEBEF3056D98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5177876-0FEC-481B-815F-84AF53968644\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC38566A-07F1-4F21-BAC1-259F844DC15C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE1684B8-3060-4139-BC06-707F27A05958\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF32C74C-3EA3-4E1F-BADA-BB4A92068266\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D569A750-C649-4D40-89AB-D29773E66F66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95B69FA8-1182-46F1-952F-4610288ED409\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:2.22.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5716BB97-7829-4FDE-92AC-69CA10332F45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45C36666-518F-4956-816A-940930425955\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF2DF96F-E45E-45AF-85E5-E939F923EC1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"11C6713F-01ED-4AE9-AE42-89926067E6E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7AB5010D-37A3-4B6E-92B6-6F41A3708851\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EEB09719-122F-4D25-B680-18029D5D9DE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF585D92-9FAF-4858-A956-68AF77227333\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BA67823-C9D9-4C5B-A4ED-669E6F1851C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB0F7531-A660-4604-80BD-15B01E2916BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.0.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6FE6868-BB9F-4EB8-9E37-3438559CB01B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F248EA4D-1A39-40FD-8D3C-9701D36FD6B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"14B5A433-526F-436E-9FCD-B71E661180FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"48EDC5BC-AD4B-4E67-B79C-F44292307AB4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FEC62B7-2CAA-4A0D-A9B2-B4A6B105A6F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B4A7A67-1355-4648-B8C9-3231BED96547\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"442AB3EE-61DF-4B25-ABEB-55905C01E376\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6A71919-DC70-4AE2-9D16-76A177DAE331\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA43E47B-F474-4F5B-A91B-9AF99359FE5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A7A3A453-EE50-458C-8F31-D7AA232006FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D920D39-683D-4F9F-AA85-3C4D1600DAD6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.4.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7A4F1FD-2B00-4A99-AAA1-DBBFE3748D87\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"850ADB66-21F2-49CB-B105-BDA16A286CFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1907D4D0-9D6E-476E-BD1A-88A32D3EFE38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:bugzilla:3.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61DD0779-786E-4714-AA73-86FB19E26028\"}]}]}],\"references\":[{\"url\":\"http://secunia.com/advisories/38443\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/509282/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/38025\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/0261\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=314871\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=434801\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/56003\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/38443\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/509282/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/38025\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.vupen.com/english/advisories/2010/0261\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=314871\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=434801\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/56003\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.