CVE

Id
7868  
CVE No.
CVE-2003-1044  
Status
Candidate  
Description
editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned with the original group ID.  
Phase
Assigned (20040527)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
47073 7868 CVE-2003-1044 BUGTRAQ:20031103 [BUGZILLA] Security Advisory - SQL injection, information leak  View
47074 7868 CVE-2003-1044 URL:http://www.securityfocus.com/archive/1/343185  View
47075 7868 CVE-2003-1044 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=219690  View
47076 7868 CVE-2003-1044 CONECTIVA:CLA-2003:774  View
47077 7868 CVE-2003-1044 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774  View
47078 7868 CVE-2003-1044 BID:8953  View
47079 7868 CVE-2003-1044 URL:http://www.securityfocus.com/bid/8953  View
47080 7868 CVE-2003-1044 XF:bugzilla-groupid-gain-privileges(13597)  View

Related JVN