CVE

Id
81776  
CVE No.
CVE-2015-4499  
Status
Candidate  
Description
Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses during account registration, which allows remote attackers to obtain the default privileges for an arbitrary domain name by placing that name in a substring of an address, as demonstrated by truncation of an @mozilla.com.example.com address to an @mozilla.com address.  
Phase
Assigned (20150610)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
734269 81776 CVE-2015-4499 BUGTRAQ:20150910 Security Advisory for Bugzilla 5.0, 4.4.9, and 4.2.14  View
734270 81776 CVE-2015-4499 URL:http://seclists.org/bugtraq/2015/Sep/48  View
734271 81776 CVE-2015-4499 BUGTRAQ:20150910 Security Advisory for Bugzilla 5.0.1, 4.4.10 and 4.2.15  View
734272 81776 CVE-2015-4499 URL:http://seclists.org/bugtraq/2015/Sep/49  View
734273 81776 CVE-2015-4499 MISC:http://packetstormsecurity.com/files/133578/Bugzilla-Unauthorized-Account-Creation.html  View
734274 81776 CVE-2015-4499 MISC:https://bug1202447.bmoattachments.org/attachment.cgi?id=8657861  View
734275 81776 CVE-2015-4499 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1202447  View
734276 81776 CVE-2015-4499 FEDORA:FEDORA-2015-15767  View
734277 81776 CVE-2015-4499 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169983.html  View
734278 81776 CVE-2015-4499 FEDORA:FEDORA-2015-15768  View
734279 81776 CVE-2015-4499 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169946.html  View
734280 81776 CVE-2015-4499 FEDORA:FEDORA-2015-15769  View
734281 81776 CVE-2015-4499 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168725.html  View
734282 81776 CVE-2015-4499 SECTRACK:1033542  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
10560 JVNDB-2015-005880 LibreOffice および Apache OpenOffice における重要な情報を取得される脆弱性 LibreOffice および Apache OpenOffice は、リンクを処理する際、OpenDocument Format ファイルおよびテンプレート内に保存された LinkUpdateMode 設定情報を使用するため、重要な情報を取得される脆弱性が存在します。 CVE-2015-4551 81776 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005880.html  View