NVD

Id
57126  
Name
CVE-2007-5038  
Description
The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-09-23  
Modified Date
2011-03-07  
Seq
2007-5038  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
291692 57126 CVE-2007-5038 FEDORA-2007-2299  View
291693 57126 CVE-2007-5038 http://www.bugzilla.org/security/3.0.1/  View
291694 57126 CVE-2007-5038 20070919 Security Advisory for Bugzilla 3.0.1 and 3.1.1  View
291695 57126 CVE-2007-5038 25725  View
291696 57126 CVE-2007-5038 1018719  View
291697 57126 CVE-2007-5038 ADV-2007-3200  View
291698 57126 CVE-2007-5038 bugzilla-offeraccount-security-bypass(36692)  View
291699 57126 CVE-2007-5038 https://bugzilla.mozilla.org/show_bug.cgi?id=395632  View
291700 57126 CVE-2007-5038 https://bugzilla.redhat.com/show_bug.cgi?id=299981  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55733 JVNDB-2007-004425 Bugzilla の WebService の User.pm におけるアカウント作成の制限を回避される脆弱性 Bugzilla の WebService の User.pm の offer_account_by_email 関数は、createemailregexp パラメータの値をチェックしないため、アカウント作成の制限を回避される脆弱性が存在します。 CVE-2007-5038 28393 CVE-2007-5038 57126 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004425.html 2007-09-18 2012-09-25 View