CVE

Id
46348  
CVE No.
CVE-2010-3764  
Status
Candidate  
Description
The Old Charts implementation in Bugzilla 2.12 through 3.2.8, 3.4.8, 3.6.2, 3.7.3, and 4.1 creates graph files with predictable names in graphs/, which allows remote attackers to obtain sensitive information via a modified URL.  
Phase
Assigned (20101005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
505278 46348 CVE-2010-3764 CONFIRM:http://www.bugzilla.org/security/3.2.8/  View
505279 46348 CVE-2010-3764 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=419014  View
505280 46348 CVE-2010-3764 FEDORA:FEDORA-2010-17235  View
505281 46348 CVE-2010-3764 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.html  View
505282 46348 CVE-2010-3764 FEDORA:FEDORA-2010-17274  View
505283 46348 CVE-2010-3764 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.html  View
505284 46348 CVE-2010-3764 FEDORA:FEDORA-2010-17280  View
505285 46348 CVE-2010-3764 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.html  View
505286 46348 CVE-2010-3764 SECTRACK:1024683  View
505287 46348 CVE-2010-3764 URL:http://www.securitytracker.com/id?1024683  View
505288 46348 CVE-2010-3764 SECUNIA:42271  View
505289 46348 CVE-2010-3764 URL:http://secunia.com/advisories/42271  View
505290 46348 CVE-2010-3764 VUPEN:ADV-2010-2878  View
505291 46348 CVE-2010-3764 URL:http://www.vupen.com/english/advisories/2010/2878  View
505292 46348 CVE-2010-3764 VUPEN:ADV-2010-2975  View
505293 46348 CVE-2010-3764 URL:http://www.vupen.com/english/advisories/2010/2975  View
505294 46348 CVE-2010-3764 XF:bugzilla-graphs-info-disclosure(62969)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36791 JVNDB-2010-002571 複数の Mozilla 製品における任意のコードを実行される脆弱性 複数の Mozilla 製品は、OS のフォント実装を使用する前に、ダウンロード可能なフォントを適切に検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2010-3768 46348 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002571.html  View