NVD

Id
74116  
Name
CVE-2003-1044  
Description
editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned with the original group ID.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-08-18  
Modified Date
2017-07-10  
Seq
2003-1044  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
381090 74116 CVE-2003-1044 http://bugzilla.mozilla.org/show_bug.cgi?id=219690  View
381091 74116 CVE-2003-1044 CLA-2003:774  View
381092 74116 CVE-2003-1044 20031103 [BUGZILLA] Security Advisory - SQL injection, information leak  View
381093 74116 CVE-2003-1044 8953  View
381094 74116 CVE-2003-1044 bugzilla-groupid-gain-privileges(13597)  View

Related JVN