NVD

Id
79028  
Name
CVE-2002-0008  
Description
Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-01-31  
Modified Date
2008-09-10  
Seq
2002-0008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
394470 79028 CVE-2002-0008 20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older  View
394471 79028 CVE-2002-0008 http://bugzilla.mozilla.org/show_bug.cgi?id=108385  View
394472 79028 CVE-2002-0008 http://bugzilla.mozilla.org/show_bug.cgi?id=108516  View
394473 79028 CVE-2002-0008 RHSA-2002:001  View
394474 79028 CVE-2002-0008 http://www.bugzilla.org/security2_14_1.html  View
394475 79028 CVE-2002-0008 bugzilla-postbug-report-spoofing(7804)  View
394476 79028 CVE-2002-0008 bugzilla-processbug-comment-spoofing(7805)  View
394477 79028 CVE-2002-0008 3793  View
394478 79028 CVE-2002-0008 3794  View

Related JVN