CVE

Id
5200  
CVE No.
CVE-2002-0810  
Status
Entry  
Description
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
27553 5200 CVE-2002-0810 BUGTRAQ:20020608 [BUGZILLA] Security Advisory For Versions of Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2  View
27554 5200 CVE-2002-0810 URL:http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html  View
27555 5200 CVE-2002-0810 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=92263  View
27556 5200 CVE-2002-0810 FREEBSD:FreeBSD-SN-02:05  View
27557 5200 CVE-2002-0810 URL:ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc  View
27558 5200 CVE-2002-0810 REDHAT:RHSA-2002:109  View
27559 5200 CVE-2002-0810 URL:http://www.redhat.com/support/errata/RHSA-2002-109.html  View
27560 5200 CVE-2002-0810 BID:4964  View
27561 5200 CVE-2002-0810 URL:http://www.securityfocus.com/bid/4964  View
27562 5200 CVE-2002-0810 XF:bugzilla-shadow-database-information(9306)  View
27563 5200 CVE-2002-0810 URL:http://www.iss.net/security_center/static/9306.php  View
27564 5200 CVE-2002-0810 OSVDB:6399  View

Related JVN