CVE-2006-5454

Bugzilla <2.18.6, 2.20.x <2.20.3, 2.22.x <2.22.1, 2.23.x <2.23.3 - ...

Title source: llm
STIX 2.1

Description

Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote attackers to obtain (1) the description of arbitrary attachments by viewing the attachment in "diff" mode in attachment.cgi, and (2) the deadline field by viewing the XML format of the bug in show_bug.cgi.

References (13)

Core 13
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22409
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/1760
Patch vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017064
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4035
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/29546
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20538
Issue Tracking x_refsource_confirm
http://www.bugzilla.org/security/2.18.5/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22790
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/29547
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200611-04.xml
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/448777/100/100/threaded

Scores

EPSS 0.0191
EPSS Percentile 77.5%

Details

Status published
Products (13)
mozilla/bugzilla 2.18 (4 CPE variants)
mozilla/bugzilla 2.18.1
mozilla/bugzilla 2.18.2
mozilla/bugzilla 2.18.3
mozilla/bugzilla 2.18.4
mozilla/bugzilla 2.18.5
mozilla/bugzilla 2.20 (3 CPE variants)
mozilla/bugzilla 2.20.1
mozilla/bugzilla 2.20.2
mozilla/bugzilla 2.22
... and 3 more
Published Oct 23, 2006
Tracked Since Feb 18, 2026