CVEvulnerability
CVE-2010-4568
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Bugzilla 2.14 through 2.22.7; 3.0.x, 3.1.x, and 3.2.x before 3.2.10; 3.4.x before 3.4.10; 3.6.x before 3.6.4; and 4.0.x before 4.0rc2 does not properly generate random values for cookies and tokens, which allows remote attackers to obtain access to arbitrary accounts via unspecified vectors, related to an insufficient number of calls to the srand function.
Affected configurations
• mozilla bugzilla 2.14
• mozilla bugzilla 2.14.1
• mozilla bugzilla 2.14.2
• mozilla bugzilla 2.14.3
• mozilla bugzilla 2.14.4
• mozilla bugzilla 2.14.5
• mozilla bugzilla 2.16
• mozilla bugzilla 2.16.1
• mozilla bugzilla 2.16.2
• mozilla bugzilla 2.16.3
• mozilla bugzilla 2.16.4
• mozilla bugzilla 2.16.5
• mozilla bugzilla 2.16.6
• mozilla bugzilla 2.16.7
• mozilla bugzilla 2.16.8
• mozilla bugzilla 2.16.9
• mozilla bugzilla 2.16.10
• mozilla bugzilla 2.16.11
• mozilla bugzilla 2.17
• mozilla bugzilla 2.17.1
• mozilla bugzilla 2.17.3
• mozilla bugzilla 2.17.4
• mozilla bugzilla 2.17.5
• mozilla bugzilla 2.17.6
• mozilla bugzilla 2.17.7
• mozilla bugzilla 2.18
• mozilla bugzilla 2.18.1
• mozilla bugzilla 2.18.2
• mozilla bugzilla 2.18.3
• mozilla bugzilla 2.18.4
• mozilla bugzilla 2.18.5
• mozilla bugzilla 2.18.6
• mozilla bugzilla 2.18.6\+
• mozilla bugzilla 2.19
• mozilla bugzilla 2.19.1
• mozilla bugzilla 2.19.2
• mozilla bugzilla 2.19.3
• mozilla bugzilla 2.20
• mozilla bugzilla 2.20.1
• mozilla bugzilla 2.20.2
• mozilla bugzilla 2.20.3
• mozilla bugzilla 2.20.4
• mozilla bugzilla 2.20.5
• mozilla bugzilla 2.20.6
• mozilla bugzilla 2.20.7
• mozilla bugzilla 2.21
• mozilla bugzilla 2.21.1
• mozilla bugzilla 2.21.2
• mozilla bugzilla 2.22
• mozilla bugzilla 2.22.1
• mozilla bugzilla 2.22.2
• mozilla bugzilla 2.22.3
• mozilla bugzilla 2.22.4
• mozilla bugzilla 2.22.5
• mozilla bugzilla 2.22.6
• mozilla bugzilla 3.0
• mozilla bugzilla 3.0.0
• mozilla bugzilla 3.0.1
• mozilla bugzilla 3.0.2
• mozilla bugzilla 3.0.3
… and 39 more
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html lists.fedoraproject.org
- http://osvdb.org/70700 osvdb.org
- http://secunia.com/advisories/43033 Vendor Advisory
- http://secunia.com/advisories/43165 secunia.com
- http://www.bugzilla.org/security/3.2.9/ Vendor Advisory
- http://www.debian.org/security/2011/dsa-2322 www.debian.org
- http://www.securityfocus.com/bid/45982 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0207 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0271 www.vupen.com
- https://bugzilla.mozilla.org/attachment.cgi?id=506031&action=diff bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=619594 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=621591 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65001 exchange.xforce.ibmcloud.com
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053665.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053678.html lists.fedoraproject.org
- http://osvdb.org/70700 osvdb.org
- http://secunia.com/advisories/43033 Vendor Advisory
- http://secunia.com/advisories/43165 secunia.com
- http://www.bugzilla.org/security/3.2.9/ Vendor Advisory
- http://www.debian.org/security/2011/dsa-2322 www.debian.org
- http://www.securityfocus.com/bid/45982 www.securityfocus.com
- http://www.vupen.com/english/advisories/2011/0207 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0271 www.vupen.com
- https://bugzilla.mozilla.org/attachment.cgi?id=506031&action=diff bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=619594 bugzilla.mozilla.org
- https://bugzilla.mozilla.org/show_bug.cgi?id=621591 bugzilla.mozilla.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65001 exchange.xforce.ibmcloud.com