CVE-2002-0804
published 2002-08-12CVE-2002-0804: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by…
PriorityP426high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.40%
69.6th percentile
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
security flaw
vendor_redhat·2002-06-08·CVSS 7.5
CVE-2002-0804 [HIGH] security flaw
security flaw
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.
GHSA
GHSA-9pm5-x4w3-qm9c: Bugzilla 2
ghsa_unreviewed·2022-04-30
CVE-2002-0804 [HIGH] GHSA-9pm5-x4w3-qm9c: Bugzilla 2
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.
No detection rules found.
No public exploits indexed.
http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.htmlhttp://bugzilla.mozilla.org/show_bug.cgi?id=129466http://www.iss.net/security_center/static/9301.phphttp://www.osvdb.org/6394http://www.redhat.com/support/errata/RHSA-2002-109.htmlhttp://www.securityfocus.com/bid/4964http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.htmlhttp://bugzilla.mozilla.org/show_bug.cgi?id=129466http://www.iss.net/security_center/static/9301.phphttp://www.osvdb.org/6394http://www.redhat.com/support/errata/RHSA-2002-109.htmlhttp://www.securityfocus.com/bid/4964
2002-08-12
Published