CVE

Id
28395  
CVE No.
CVE-2007-5038  
Status
Candidate  
Description
The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation.  
Phase
Assigned (20070923)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
295086 28395 CVE-2007-5038 BUGTRAQ:20070919 Security Advisory for Bugzilla 3.0.1 and 3.1.1  View
295087 28395 CVE-2007-5038 URL:http://www.securityfocus.com/archive/1/archive/1/480077/100/0/threaded  View
295088 28395 CVE-2007-5038 CONFIRM:http://www.bugzilla.org/security/3.0.1/  View
295089 28395 CVE-2007-5038 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=395632  View
295090 28395 CVE-2007-5038 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=299981  View
295091 28395 CVE-2007-5038 FEDORA:FEDORA-2007-2299  View
295092 28395 CVE-2007-5038 URL:http://fedoranews.org/updates/FEDORA-2007-229.shtml  View
295093 28395 CVE-2007-5038 BID:25725  View
295094 28395 CVE-2007-5038 URL:http://www.securityfocus.com/bid/25725  View
295095 28395 CVE-2007-5038 VUPEN:ADV-2007-3200  View
295096 28395 CVE-2007-5038 URL:http://www.vupen.com/english/advisories/2007/3200  View
295097 28395 CVE-2007-5038 SECTRACK:1018719  View
295098 28395 CVE-2007-5038 URL:http://www.securitytracker.com/id?1018719  View
295099 28395 CVE-2007-5038 SECUNIA:26848  View
295100 28395 CVE-2007-5038 URL:http://secunia.com/advisories/26848  View
295101 28395 CVE-2007-5038 SECUNIA:26969  View
295102 28395 CVE-2007-5038 URL:http://secunia.com/advisories/26969  View
295103 28395 CVE-2007-5038 XF:bugzilla-offeraccount-security-bypass(36692)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53980 JVNDB-2007-002672 Ghost Security Suite alpha におけるサービス運用妨害 (DoS) の脆弱性 Ghost Security Suite alpha は、System Service Descriptor Table (SSDT) 関数ハンドラへの特定のパラメータを適切に検証しないため、サービス運用妨害 (クラッシュ) 状態となる、および権限を取得される脆弱性が存在します。 CVE-2007-5040 28395 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002672.html  View