CVEvulnerability
CVE-2007-5038
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-09-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation.
Affected configurations
• mozilla bugzilla 3.0.0
• mozilla bugzilla 3.0.1
• mozilla bugzilla 3.1.0
• mozilla bugzilla 3.1.1
Related
Weakness · not in database (1)
References
- http://fedoranews.org/updates/FEDORA-2007-229.shtml fedoranews.org
- http://secunia.com/advisories/26848 Patch, Vendor Advisory
- http://secunia.com/advisories/26969 secunia.com
- http://www.bugzilla.org/security/3.0.1/ Patch
- http://www.securityfocus.com/archive/1/480077/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25725 www.securityfocus.com
- http://www.securitytracker.com/id?1018719 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3200 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=395632 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=299981 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36692 exchange.xforce.ibmcloud.com
- http://fedoranews.org/updates/FEDORA-2007-229.shtml fedoranews.org
- http://secunia.com/advisories/26848 Patch, Vendor Advisory
- http://secunia.com/advisories/26969 secunia.com
- http://www.bugzilla.org/security/3.0.1/ Patch
- http://www.securityfocus.com/archive/1/480077/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25725 www.securityfocus.com
- http://www.securitytracker.com/id?1018719 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3200 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=395632 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=299981 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36692 exchange.xforce.ibmcloud.com