• info
• discussion
• exploit
• solution
• references

BugZilla Show_Activity.CGI Restricted Bug Comments Revealing Vulnerability

Solution:
Updates available:


Mozilla Bugzilla 2.10

• Mozilla Bugzilla 2.14
  http://ftp.mozilla.org/pub/webtools/bugzilla-2.14.tar.gz


• RedHat 7.0 alpha perl-Chart-0.99c.pre3-1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/perl-Chart-0.99c.pre3 -1.alpha.rpm


• RedHat 7.0 alpha perl-DBD-MySQL-1.2215-1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/


• RedHat 7.0 alpha perl-GD-1.33-1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/perl-GD-1.33-1.alpha. rpm


• RedHat 7.0 i386 perl-Chart-0.99c.pre3-1.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/perl-Chart-0.99c.pre3- 1.i386.rpm


• RedHat 7.0 i386 perl-DBD-MySQL-1.2215-1.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/perl-DBD-MySQL-1.2215- 1.i386.rpm


• RedHat 7.0 i386 perl-GD-1.33-1.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/perl-GD-1.33-1.i386.rp m


• RedHat 7.0 noarch bugzilla-2.14-1.noarch.rpm
  ftp://updates.redhat.com/7.0/en/powertools/noarch/bugzilla-2.14-1.noar ch.rpm


• RedHat 7.1 alpha perl-DBD-MySQL-1.2215-1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/powertools/alpha/


• RedHat 7.1 alpha perl-GD-1.33-1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/powertools/alpha/perl-GD-1.33-1.alpha. rpm


• RedHat 7.1 i386 perl-Chart-0.99c.pre3-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/powertools/i386/


• RedHat 7.1 i386 perl-DBD-MySQL-1.2215-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/powertools/i386/perl-DBD-MySQL-1.2215- 1.i386.rpm


• RedHat 7.1 i386 perl-GD-1.33-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/powertools/i386/perl-GD-1.33-1.i386.rp m


• RedHat 7.1 noarch bugzilla-2.14-1.noarch.rpm
  ftp://updates.redhat.com/7.1/en/powertools/noarch/bugzilla-2.14-1.noar ch.rpm

Mozilla Bugzilla 2.12

• Mozilla Bugzilla 2.14
  http://ftp.mozilla.org/pub/webtools/bugzilla-2.14.tar.gz


• RedHat 7.0 alpha perl-Chart-0.99c.pre3-1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/perl-Chart-0.99c.pre3 -1.alpha.rpm


• RedHat 7.0 alpha perl-DBD-MySQL-1.2215-1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/


• RedHat 7.0 alpha perl-GD-1.33-1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/perl-GD-1.33-1.alpha. rpm


• RedHat 7.0 i386 perl-Chart-0.99c.pre3-1.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/perl-Chart-0.99c.pre3- 1.i386.rpm


• RedHat 7.0 i386 perl-DBD-MySQL-1.2215-1.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/perl-DBD-MySQL-1.2215- 1.i386.rpm


• RedHat 7.0 i386 perl-GD-1.33-1.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/perl-GD-1.33-1.i386.rp m


• RedHat 7.0 noarch bugzilla-2.14-1.noarch.rpm
  ftp://updates.redhat.com/7.0/en/powertools/noarch/bugzilla-2.14-1.noar ch.rpm


• RedHat 7.1 alpha perl-DBD-MySQL-1.2215-1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/powertools/alpha/


• RedHat 7.1 alpha perl-GD-1.33-1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/powertools/alpha/perl-GD-1.33-1.alpha. rpm


• RedHat 7.1 i386 perl-Chart-0.99c.pre3-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/powertools/i386/


• RedHat 7.1 i386 perl-DBD-MySQL-1.2215-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/powertools/i386/perl-DBD-MySQL-1.2215- 1.i386.rpm


• RedHat 7.1 i386 perl-GD-1.33-1.i386.rpm
  ftp://updates.redhat.com/7.1/en/powertools/i386/perl-GD-1.33-1.i386.rp m


• RedHat 7.1 noarch bugzilla-2.14-1.noarch.rpm
  ftp://updates.redhat.com/7.1/en/powertools/noarch/bugzilla-2.14-1.noar ch.rpm

Mozilla Bugzilla 2.8

• Mozilla Bugzilla 2.14
  http://ftp.mozilla.org/pub/webtools/bugzilla-2.14.tar.gz