CVE-2011-2977
published 2011-08-09CVE-2011-2977: Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded…
PriorityP44low2.1CVSS 2.0
AVLACLAuNCPINAN
EPSS
0.29%
21.2th percentile
Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files. NOTE: this issue exists because of a regression in 3.6.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
| mozilla | bugzilla | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2qvh-xj45-rvjq: Bugzilla 3
ghsa_unreviewed·2022-05-17
CVE-2011-2977 [LOW] GHSA-2qvh-xj45-rvjq: Bugzilla 3
Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files. NOTE: this issue exists because of a regression in 3.6.
GHSA
GHSA-9rqw-jw32-4q7h: Bugzilla 2
ghsa_unreviewed·2022-05-17·CVSS 2.1
CVE-2008-7292 [LOW] CWE-200 GHSA-9rqw-jw32-4q7h: Bugzilla 2
Bugzilla 2.20.x before 2.20.5, 2.22.x before 2.22.3, and 3.0.x before 3.0.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files, a different vulnerability than CVE-2011-2977.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2011-2976 CVE-2011-2379 CVE-2011-2380 CVE-2011-2979 CVE-2011-2381 CVE-2011-2978 CVE-2011-2977 bugzilla: multiple security flaws fixed in 3.4.12, 3.6.6, 4.0.2, and 4.1.3 [epel-all]
bugzilla·2011-08-08·CVSS 4.3
CVE-2011-2976 [MEDIUM] CVE-2011-2976 CVE-2011-2379 CVE-2011-2380 CVE-2011-2979 CVE-2011-2381 CVE-2011-2978 CVE-2011-2977 bugzilla: multiple security flaws fixed in 3.4.12, 3.6.6, 4.0.2, and 4.1.3 [epel-all]
CVE-2011-2976 CVE-2011-2379 CVE-2011-2380 CVE-2011-2979 CVE-2011-2381 CVE-2011-2978 CVE-2011-2977 bugzilla: multiple security flaws fixed in 3.4.12, 3.6.6, 4.0.2, and 4.1.3 [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
http
Bugzilla
CVE-2011-2976 CVE-2011-2379 CVE-2011-2380 CVE-2011-2979 CVE-2011-2381 CVE-2011-2978 CVE-2011-2977 bugzilla: multiple security flaws fixed in 3.4.12, 3.6.6, 4.0.2, and 4.1.3
bugzilla·2011-08-08·CVSS 4.3
CVE-2011-2976 [MEDIUM] CVE-2011-2976 CVE-2011-2379 CVE-2011-2380 CVE-2011-2979 CVE-2011-2381 CVE-2011-2978 CVE-2011-2977 bugzilla: multiple security flaws fixed in 3.4.12, 3.6.6, 4.0.2, and 4.1.3
CVE-2011-2976 CVE-2011-2379 CVE-2011-2380 CVE-2011-2979 CVE-2011-2381 CVE-2011-2978 CVE-2011-2977 bugzilla: multiple security flaws fixed in 3.4.12, 3.6.6, 4.0.2, and 4.1.3
From the upstream advisory [1]:
Vulnerability Details
Class: Cross-Site Scripting
Versions: 2.4 to 3.4.11, 3.5.1 to 3.6.5, 3.7.1 to 4.0.1,
4.1.1 to 4.1.2
Fixed In: 3.4.12, 3.6.6, 4.0.2, 4.1.3
Description: Bugzilla uses an alternate host for attachments when
viewing them in raw format to prevent cross-site scripting
attacks. This alternate host is now also used when viewing
patches in "Raw Unified" mode because Internet Explorer 8
and older, and Safari before 5.0.6 do content sniffing,
which could lead to the execution of malicious code.
References: https://bugzilla.mozilla.org/show_bug.cgi?id=637981
CVE Number: CVE-2
http://secunia.com/advisories/45501http://www.bugzilla.org/security/3.4.11/http://www.osvdb.org/74302http://www.securityfocus.com/bid/49042https://bugzilla.mozilla.org/show_bug.cgi?id=660502https://exchange.xforce.ibmcloud.com/vulnerabilities/69037http://secunia.com/advisories/45501http://www.bugzilla.org/security/3.4.11/http://www.osvdb.org/74302http://www.securityfocus.com/bid/49042https://bugzilla.mozilla.org/show_bug.cgi?id=660502https://exchange.xforce.ibmcloud.com/vulnerabilities/69037
2011-08-09
Published