NVD

Id
73161  
Name
CVE-2003-0013  
Description
The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not include filenames for backup copies of the localconfig file that are made from editors such as vi and Emacs, which could allow remote attackers to obtain a database password by directly accessing the backup file.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2003-01-17  
Modified Date
2016-10-17  
Seq
2003-0013  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
376560 73161 CVE-2003-0013 20030102 [BUGZILLA] Security Advisory - remote database password disclosure  View
376561 73161 CVE-2003-0013 DSA-230  View
376562 73161 CVE-2003-0013 bugzilla-htaccess-database-password(10970)  View
376563 73161 CVE-2003-0013 6501  View

Related JVN