CVE-2007-5038

The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.bugzilla.org/security/3.0.1/	Patch
https://bugzilla.mozilla.org/show_bug.cgi?id=395632	Exploit
http://secunia.com/advisories/26848	Patch Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=299981
http://fedoranews.org/updates/FEDORA-2007-229.shtml
http://www.securityfocus.com/bid/25725
http://www.securitytracker.com/id?1018719
http://secunia.com/advisories/26969
http://www.vupen.com/english/advisories/2007/3200
https://exchange.xforce.ibmcloud.com/vulnerabilities/36692
http://www.securityfocus.com/archive/1/480077/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:bugzilla:3.1.1:::::::*
	cpe:2.3:a:mozilla:bugzilla:3.0.1:::::::*
	cpe:2.3:a:mozilla:bugzilla:3.1.0:::::::*
	cpe:2.3:a:mozilla:bugzilla:3.0.0:::::::*

Information

Published : 2007-09-23 17:17

Updated : 2018-10-15 14:40

NVD link : CVE-2007-5038

Mitre link : CVE-2007-5038

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Advertisement

Products Affected

mozilla

bugzilla

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.bugzilla.org/security/3.0.1/", "name": "http://www.bugzilla.org/security/3.0.1/", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=395632", "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=395632", "tags": ["Exploit"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/26848", "name": "26848", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=299981", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=299981", "tags": [], "refsource": "CONFIRM"}, {"url": "http://fedoranews.org/updates/FEDORA-2007-229.shtml", "name": "FEDORA-2007-2299", "tags": [], "refsource": "FEDORA"}, {"url": "http://www.securityfocus.com/bid/25725", "name": "25725", "tags": [], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id?1018719", "name": "1018719", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/26969", "name": "26969", "tags": [], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2007/3200", "name": "ADV-2007-3200", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36692", "name": "bugzilla-offeraccount-security-bypass(36692)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/480077/100/0/threaded", "name": "20070919 Security Advisory for Bugzilla 3.0.1 and 3.1.1", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-5038", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2007-09-24T00:17Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:mozilla:bugzilla:3.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mozilla:bugzilla:3.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mozilla:bugzilla:3.1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:mozilla:bugzilla:3.0.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-15T21:40Z"}