CVE-2005-2174

UNKNOWN

Bugzilla 2

Published Jul 8, 2005

Modified 1 years ago

Details

Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows attackers to access information about the bug via buglist.cgi before MySQL replication is complete.

References

WEB

http://securitytracker.com/id?1014428

WEB

http://www.bugzilla.org/security/2.18.1/

WEB

https://bugzilla.mozilla.org/show_bug.cgi?id=293159

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2005-2174

CVSS Analysis

CVSS v2.0

2.6