NVD

Id
4262  
Name
CVE-2008-4437  
Description
Directory traversal vulnerability in importxml.pl in Bugzilla before 2.22.5, and 3.x before 3.0.5, when --attach_path is enabled, allows remote attackers to read arbitrary files via an XML file with a .. (dot dot) in the data element.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-10-03  
Modified Date
2011-03-07  
Seq
2008-4437  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27041 4262 CVE-2008-4437 http://www.bugzilla.org/security/2.22.4/  View
27042 4262 CVE-2008-4437 30661  View
27043 4262 CVE-2008-4437 1020668  View
27044 4262 CVE-2008-4437 ADV-2008-2344  View
27045 4262 CVE-2008-4437 bugzilla-importxml-directory-traversal(44407)  View
27046 4262 CVE-2008-4437 https://bugzilla.mozilla.org/show_bug.cgi?id=437169  View
27047 4262 CVE-2008-4437 FEDORA-2009-2418  View
27048 4262 CVE-2008-4437 FEDORA-2009-2417  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49614 JVNDB-2008-004924 Bugzilla の importxml.pl におけるディレクトリトラバーサルの脆弱性 Bugzilla の importxml.pl には、--attach_path が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-4437 34550 CVE-2008-4437 4262 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004924.html 2008-08-12 2012-09-25 View