CVE-2010-2758

Bugzilla 2.17.1-3.2.7, 3.3.1-3.4.7, 3.5.1-3.6.1, 3.7-3.7.2 - Information Exposure via Error Message Discrepancy

Title source: llm
STIX 2.1

Description

Bugzilla 2.17.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 generates different error messages depending on whether a product exists, which makes it easier for remote attackers to guess product names via unspecified use of the (1) Reports or (2) Duplicates page.

References (12)

Core 12
Core References
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=519835
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2035
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40892
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=623423
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/42275
Issue Tracking x_refsource_confirm
http://www.bugzilla.org/security/3.2.7/
Issue Tracking x_refsource_confirm
https://bugzilla.mozilla.org/show_bug.cgi?id=577139
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/41128
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2205

Scores

EPSS 0.0141
EPSS Percentile 69.5%

Details

CWE
CWE-200
Status published
Products (44)
mozilla/bugzilla 2.2
mozilla/bugzilla 2.4
mozilla/bugzilla 2.6
mozilla/bugzilla 2.8
mozilla/bugzilla 2.9
mozilla/bugzilla 2.17.1
mozilla/bugzilla 2.17.2
mozilla/bugzilla 2.17.3
mozilla/bugzilla 2.17.4
mozilla/bugzilla 2.17.5
... and 34 more
Published Aug 16, 2010
Tracked Since Feb 18, 2026