CVE

Id
34554  
CVE No.
CVE-2008-4437  
Status
Candidate  
Description
Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows remote attackers to read arbitrary files via an XML file with a .. (dot dot) in the data element.  
Phase
Assigned (20081003)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
378503 34554 CVE-2008-4437 MISC:https://bugzilla.mozilla.org/show_bug.cgi?id=437169  View
378504 34554 CVE-2008-4437 CONFIRM:http://www.bugzilla.org/security/2.22.4/  View
378505 34554 CVE-2008-4437 FEDORA:FEDORA-2009-2417  View
378506 34554 CVE-2008-4437 URL:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00687.html  View
378507 34554 CVE-2008-4437 FEDORA:FEDORA-2009-2418  View
378508 34554 CVE-2008-4437 URL:https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00664.html  View
378509 34554 CVE-2008-4437 BID:30661  View
378510 34554 CVE-2008-4437 URL:http://www.securityfocus.com/bid/30661  View
378511 34554 CVE-2008-4437 SECTRACK:1020668  View
378512 34554 CVE-2008-4437 URL:http://www.securitytracker.com/id?1020668  View
378513 34554 CVE-2008-4437 SECUNIA:34361  View
378514 34554 CVE-2008-4437 URL:http://secunia.com/advisories/34361  View
378515 34554 CVE-2008-4437 VUPEN:ADV-2008-2344  View
378516 34554 CVE-2008-4437 URL:http://www.vupen.com/english/advisories/2008/2344  View
378517 34554 CVE-2008-4437 SECUNIA:31444  View
378518 34554 CVE-2008-4437 URL:http://secunia.com/advisories/31444  View
378519 34554 CVE-2008-4437 XF:bugzilla-importxml-directory-traversal(44407)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49616 JVNDB-2008-004926 Linksys WAP4400N Wi-Fi アクセスポイントにおけるサービス運用妨害 (DoS) の脆弱性 Marvell 88W8361P-BEM1 チップセット上の Linksys WAP4400N Wi-Fi アクセスポイントの Marvell ドライバには、WEP モードが有効になっている際、不正な形式の 802.11 フレームを適切に解析しないため、サービス運用妨害 (リブートまたはハングアップ) 状態となる脆弱性が存在します。 CVE-2008-4441 34554 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004926.html  View