CVE-2009-3989
Published Feb 3, 2010
Last updated 6 years ago
Overview
- Description
- Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26760A2C-32A4-4494-B2DF-6B291D941105",
"versionEndIncluding": "3.0.10"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC38A53F-60E6-4F7A-A953-C53D141E830D"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAFEF951-3FE8-49DD-B3DD-E526D5B52998"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8112FF13-B4CE-4DC7-85B1-C69D975F162B"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6E5E379-D475-42F3-B0DC-3D04C1D25566"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "893741D3-062B-45F9-B5A3-1B81058E7FD7"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E8D53B5F-6AEE-4192-B838-E1DA92C59285"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1883A98C-E595-4F3C-87BF-A63393F9F561"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9A4B035-B73E-48E9-BBB9-83219F5D2A95"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9452C271-2812-4775-8396-394C642EACFD"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D351AF2-C0AB-4BB3-8692-677A3025A615"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5877CECA-F758-4F48-B4F4-2C4C1DF01FA0"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D63CE086-5872-4594-8F4B-8D812E7EF09C"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B900D9A7-913A-4176-90CF-C7C3B09A4261"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B692910E-633D-4A88-B245-56A2B58DD4CB"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F86EE5DB-442B-4C78-8152-AF1048C6A974"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19B82A1A-56EB-41D5-8619-2A717E3A6ECF"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83A0406C-AAF2-4A4C-9567-E21DF1B6C46E"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64434BFC-DDC0-4C7D-B578-472B0610C89E"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A30F28D9-B000-4C26-A911-5E1B8A867BF6"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A123F78-A671-4FB5-AE78-83762E9323C7"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28C34288-A326-4B71-99B0-DA9FFD28160F"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.16.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73648879-BB08-4BE4-A7FF-1E8DF4E264B4"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDB99B2D-CA05-4BC0-BCA4-9B94DF248333"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4869A709-AF79-49BD-A7D2-D48A8D79A085"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAC72143-27C3-498F-AFAB-98AE043C0545"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE5E8E72-D493-460D-B5A0-F90C291398A5"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04885D31-09F3-455F-A1A9-815E182ABCF9"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F153300E-42CC-4BDD-88EC-E8A0ADB4E3B7"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92BCD546-2A50-4F43-935C-B68459EE894E"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C535BAB7-6146-440B-ADBD-51007585CFC8"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B6BA7E8-DEC7-4D94-B9F9-B70EC39FD892"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.6\\+:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15E6F17A-7292-4640-A5E6-59865D1CDD7B"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9130B6B-764B-4B83-A2BD-E16013682875"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C7A5111-8729-48DF-B308-7A489BEFA6D0"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.18.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15E24C39-0E61-4A57-B93F-F0ABF4CEAEEB"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A749C7AB-6F60-469C-BD95-759205DDA345"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B45F6C27-D89A-42A0-A304-5B0C57D2A9F1"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "196B7CD8-D721-4CFB-B126-78758128E900"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEA9DE63-9951-4FE0-80BE-0F6F197303D7"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0CEDD02-1CB8-4D5B-B82B-E300B4E39065"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E27101B-7985-4412-A14F-9ED11E4C874C"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A74E8A2-223E-4877-989E-494362B513E9"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0CAFB45-B115-4492-9919-60223304BB27"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC3F7C44-C734-419B-AB62-3AD52554FC7D"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.20.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "695036D1-994C-451E-8D53-0A345702E4D1"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2969731-8256-431B-9356-4BC873D98F6D"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C166E42-9B36-4883-B738-EEBEF3056D98"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5177876-0FEC-481B-815F-84AF53968644"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC38566A-07F1-4F21-BAC1-259F844DC15C"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE1684B8-3060-4139-BC06-707F27A05958"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF32C74C-3EA3-4E1F-BADA-BB4A92068266"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D569A750-C649-4D40-89AB-D29773E66F66"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95B69FA8-1182-46F1-952F-4610288ED409"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:2.22.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5716BB97-7829-4FDE-92AC-69CA10332F45"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45C36666-518F-4956-816A-940930425955"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF2DF96F-E45E-45AF-85E5-E939F923EC1B"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80EBAA09-F2C8-445E-8E3A-B5F937E1B1E2"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11C6713F-01ED-4AE9-AE42-89926067E6E6"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AB5010D-37A3-4B6E-92B6-6F41A3708851"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEB09719-122F-4D25-B680-18029D5D9DE9"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF585D92-9FAF-4858-A956-68AF77227333"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BA67823-C9D9-4C5B-A4ED-669E6F1851C0"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB0F7531-A660-4604-80BD-15B01E2916BD"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6FE6868-BB9F-4EB8-9E37-3438559CB01B"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F248EA4D-1A39-40FD-8D3C-9701D36FD6B1"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14B5A433-526F-436E-9FCD-B71E661180FD"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48EDC5BC-AD4B-4E67-B79C-F44292307AB4"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FEC62B7-2CAA-4A0D-A9B2-B4A6B105A6F7"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B4A7A67-1355-4648-B8C9-3231BED96547"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "442AB3EE-61DF-4B25-ABEB-55905C01E376"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6A71919-DC70-4AE2-9D16-76A177DAE331"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA43E47B-F474-4F5B-A91B-9AF99359FE5F"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7A3A453-EE50-458C-8F31-D7AA232006FC"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D920D39-683D-4F9F-AA85-3C4D1600DAD6"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7A4F1FD-2B00-4A99-AAA1-DBBFE3748D87"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "850ADB66-21F2-49CB-B105-BDA16A286CFC"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1907D4D0-9D6E-476E-BD1A-88A32D3EFE38"
},
{
"criteria": "cpe:2.3:a:mozilla:bugzilla:3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61DD0779-786E-4714-AA73-86FB19E26028"
}
],
"operator": "OR"
}
]
}
]