Nessus Plugin #15565

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Bugzilla remote arbitrary command execution

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Checks for the version of bugzilla

Version:

$Revision: 1.1 $

Cve_id:

CVE-2000-0421, CAN-2001-0329

Bugtraq_id:

1199

Xrefs:

-

Description:

The remote Bugzilla bug tracking system, according to its version number,
is vulnerable to arbitrary commands execution flaws due to a lack of
sanitization of user-supplied data in process_bug.cgi

Solution : Upgrade at version 2.12 or newer
Risk factor : High