CVEvulnerability
CVE-2001-0330
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-06-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed.
Affected configurations
• mozilla bugzilla 2.4
• mozilla bugzilla 2.6
• mozilla bugzilla 2.8
• mozilla bugzilla 2.10
Related
Referenced by CWE · observed example (1)
- CWE-433 Unparsed Raw Web Content Delivery weakness
References
- http://www.atstake.com/research/advisories/2001/a043001-1.txt Patch, Vendor Advisory
- http://www.securityfocus.com/bid/2671 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6489 exchange.xforce.ibmcloud.com
- http://www.atstake.com/research/advisories/2001/a043001-1.txt Patch, Vendor Advisory
- http://www.securityfocus.com/bid/2671 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6489 exchange.xforce.ibmcloud.com