NVD

Id
79808  
Name
CVE-2002-0809  
Description
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-08-12  
Modified Date
2008-09-05  
Seq
2002-0809  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
398038 79808 CVE-2002-0809 20020608 [BUGZILLA] Security Advisory For Versions of Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2  View
398039 79808 CVE-2002-0809 http://bugzilla.mozilla.org/show_bug.cgi?id=148674  View
398040 79808 CVE-2002-0809 bugzilla-group-permissions-removal(10141)  View
398041 79808 CVE-2002-0809 RHSA-2002:109  View
398042 79808 CVE-2002-0809 4964  View

Related JVN