CVEvulnerability
CVE-2010-2757
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-08-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-310
Description
The sudo feature in Bugzilla 2.22rc1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2 does not properly send impersonation notifications, which makes it easier for remote authenticated users to impersonate other users without discovery.
Affected configurations
• mozilla bugzilla 2.4
• mozilla bugzilla 2.6
• mozilla bugzilla 2.8
• mozilla bugzilla 2.9
• mozilla bugzilla 2.22
• mozilla bugzilla 2.22.1
• mozilla bugzilla 2.22.3
• mozilla bugzilla 2.22.4
• mozilla bugzilla 2.22.5
• mozilla bugzilla 2.22.6
• mozilla bugzilla 2.22.7
• mozilla bugzilla 2.23
• mozilla bugzilla 2.23.1
• mozilla bugzilla 2.23.2
• mozilla bugzilla 2.23.3
• mozilla bugzilla 2.23.4
• mozilla bugzilla 3.0
• mozilla bugzilla 3.0.0
• mozilla bugzilla 3.0.1
• mozilla bugzilla 3.0.2
• mozilla bugzilla 3.0.3
• mozilla bugzilla 3.0.4
• mozilla bugzilla 3.0.5
• mozilla bugzilla 3.0.6
• mozilla bugzilla 3.0.7
• mozilla bugzilla 3.0.8
• mozilla bugzilla 3.0.9
• mozilla bugzilla 3.0.10
• mozilla bugzilla 3.0.11
• mozilla bugzilla 3.1.0
• mozilla bugzilla 3.1.1
• mozilla bugzilla 3.1.2
• mozilla bugzilla 3.1.3
• mozilla bugzilla 3.2
• mozilla bugzilla 3.2.2
• mozilla bugzilla 3.2.3
• mozilla bugzilla 3.2.4
• mozilla bugzilla 3.2.5
• mozilla bugzilla 3.2.6
• mozilla bugzilla 3.2.7
• mozilla bugzilla 3.3.1
• mozilla bugzilla 3.3.2
• mozilla bugzilla 3.3.3
• mozilla bugzilla 3.3.4
• mozilla bugzilla 3.4.1
• mozilla bugzilla 3.4.2
• mozilla bugzilla 3.4.3
• mozilla bugzilla 3.4.4
• mozilla bugzilla 3.4.5
• mozilla bugzilla 3.4.6
• mozilla bugzilla 3.4.7
• mozilla bugzilla 3.5.1
• mozilla bugzilla 3.5.2
• mozilla bugzilla 3.5.3
• mozilla bugzilla 3.6
• mozilla bugzilla 3.6.1
• mozilla bugzilla 3.7
• mozilla bugzilla 3.7.1
• mozilla bugzilla 3.7.2
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html lists.fedoraproject.org
- http://secunia.com/advisories/40892 Vendor Advisory
- http://secunia.com/advisories/41128 secunia.com
- http://www.bugzilla.org/security/3.2.7/ www.bugzilla.org
- http://www.securityfocus.com/bid/42275 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2035 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2205 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=450013 bugzilla.mozilla.org
- https://bugzilla.redhat.com/show_bug.cgi?id=623423 bugzilla.redhat.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046518.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046534.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046546.html lists.fedoraproject.org
- http://secunia.com/advisories/40892 Vendor Advisory
- http://secunia.com/advisories/41128 secunia.com
- http://www.bugzilla.org/security/3.2.7/ www.bugzilla.org
- http://www.securityfocus.com/bid/42275 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/2035 Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2205 www.vupen.com
- https://bugzilla.mozilla.org/show_bug.cgi?id=450013 bugzilla.mozilla.org
- https://bugzilla.redhat.com/show_bug.cgi?id=623423 bugzilla.redhat.com