CVE-2005-1563

Bugzilla 2.10-2.18, 2.19.1-2.19.2 - Information Disclosure via Product Existence Error Messages

Title source: llm
STIX 2.1

Description

Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.

References (8)

Core 8
Core References
Vendor Advisory vendor-advisory x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040
Patch, Vendor Advisory x_refsource_confirm
http://www.bugzilla.org/security/2.16.8/
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111592031902962&w=2
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/0533
Patch, Vendor Advisory x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=287109
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13606
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15338
Patch, Vendor Advisory vdb-entry x_refsource_osvdb
http://www.osvdb.org/16425

Scores

EPSS 0.0129
EPSS Percentile 67.1%

Details

Status published
Products (23)
mozilla/bugzilla 2.10
mozilla/bugzilla 2.12
mozilla/bugzilla 2.14
mozilla/bugzilla 2.14.1
mozilla/bugzilla 2.14.2
mozilla/bugzilla 2.14.3
mozilla/bugzilla 2.14.4
mozilla/bugzilla 2.14.5
mozilla/bugzilla 2.16
mozilla/bugzilla 2.16.1
... and 13 more
Published May 14, 2005
Tracked Since Feb 18, 2026