CVE-2002-1197 — Mozilla Bugzilla vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
2.1%
top 15.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Bugzilla
Timeline
PublishedOct 28
Latest updateApr 30

Description

bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDmozilla/bugzilla5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-gvwc-rpp5-92h6: bugzilla_email_append↗2022-04-30
▶
CVEList
CVE-2002-1197: bugzilla_email_append↗2004-09-01
▶