CVE-2002-1196

Published Oct 28, 2002

Last updated 8 years ago

Overview

Description: editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set multiple bits.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1883A98C-E595-4F3C-87BF-A63393F9F561"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D9A4B035-B73E-48E9-BBB9-83219F5D2A95"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References