CVE-2007-0792
published 2007-02-06CVE-2007-0792: The mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file…
PriorityP335high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.32%
67.7th percentile
The mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file permissions, which allows remote attackers to obtain the database username and password via a direct request for the localconfig file.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | bugzilla | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/35862http://securityreason.com/securityalert/2222http://securitytracker.com/id?1017585http://www.bugzilla.org/security/2.20.3/http://www.securityfocus.com/archive/1/459025/100/0/threadedhttp://www.securityfocus.com/bid/22380http://www.vupen.com/english/advisories/2007/0477https://exchange.xforce.ibmcloud.com/vulnerabilities/32252http://osvdb.org/35862http://securityreason.com/securityalert/2222http://securitytracker.com/id?1017585http://www.bugzilla.org/security/2.20.3/http://www.securityfocus.com/archive/1/459025/100/0/threadedhttp://www.securityfocus.com/bid/22380http://www.vupen.com/english/advisories/2007/0477https://exchange.xforce.ibmcloud.com/vulnerabilities/32252
2007-02-06
Published