cvelistv5 - cve-2011-2977

CVE-2011-2977 (GCVE-0-2011-2977)

Vulnerability from cvelistv5

Published

2011-08-09 19:00

Modified

2024-08-06 23:15

Severity ?

CWE

Summary

Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files. NOTE: this issue exists because of a regression in 3.6.

References

URL

Tags

	http://secunia.com/advisories/45501	third-party-advisory, x_refsource_SECUNIA
	http://www.osvdb.org/74302	vdb-entry, x_refsource_OSVDB
	http://www.bugzilla.org/security/3.4.11/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=660502	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/69037	vdb-entry, x_refsource_XF
	http://www.securityfocus.com/bid/49042	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T23:15:32.119Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "45501",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45501"
          },
          {
            "name": "74302",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/74302"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.bugzilla.org/security/3.4.11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=660502"
          },
          {
            "name": "bugzilla-attachments-info-disc(69037)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69037"
          },
          {
            "name": "49042",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/49042"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-08-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files.  NOTE: this issue exists because of a regression in 3.6."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "45501",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45501"
        },
        {
          "name": "74302",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/74302"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.bugzilla.org/security/3.4.11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=660502"
        },
        {
          "name": "bugzilla-attachments-info-disc(69037)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69037"
        },
        {
          "name": "49042",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/49042"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-2977",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files.  NOTE: this issue exists because of a regression in 3.6."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "45501",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45501"
            },
            {
              "name": "74302",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/74302"
            },
            {
              "name": "http://www.bugzilla.org/security/3.4.11/",
              "refsource": "CONFIRM",
              "url": "http://www.bugzilla.org/security/3.4.11/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=660502",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=660502"
            },
            {
              "name": "bugzilla-attachments-info-disc(69037)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69037"
            },
            {
              "name": "49042",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/49042"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-2977",
    "datePublished": "2011-08-09T19:00:00.000Z",
    "dateReserved": "2011-08-01T00:00:00.000Z",
    "dateUpdated": "2024-08-06T23:15:32.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2011-AVI-430

Vulnerability from certfr_avis

Plusieurs vulnérabilités ont été corrigées dans Bugzilla.

Description

Plusieurs vulnérabilités ont été corrigées dans Bugzilla dont :

une mauvaise validation de certains éléments permet de mener des attaques par injection de code indirecte ;
Il est possible de déterminer l'existence d'éléments confidentiels lors de la création ou de la mise à jour de bugs ;
Une mauvaise gestion de fichiers temporaires peut être exploitées par des utilisateurs locaux pour porter atteinte à la confidentialité des données.

Se référer au bulletin de l'éditeur pour plus de détails sur les vulnérabilités corrigées et les versions affectées par ces vulnérabilités.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les versions 3.4.12, 3.6.6, 4.0.2 et 4.1.3 corrigent ces vulnérabilités.

None

Impacted products

Vendor	Product	Description
N/A	N/A	Bugzilla version 4.0.x antérieures à la version 4.0.2 ;
N/A	N/A	Bugzilla version 3.4.x antérieures à la version 3.4.12 ;
N/A	N/A	Bugzilla version 4.1.x antérieures à la version 4.1.3.
N/A	N/A	Bugzilla version 3.6.x antérieures à la version 3.6.6 ;

References

Title

Publication Time

Tags

Bulletin de sécurité Bugzilla du 4 aout 2011	None	vendor-advisory
Bulletin de sécurité Bugzilla du 04 août 2011 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Bugzilla version 4.0.x ant\u00e9rieures \u00e0 la version 4.0.2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Bugzilla version 3.4.x ant\u00e9rieures \u00e0 la version 3.4.12 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Bugzilla version 4.1.x ant\u00e9rieures \u00e0 la version 4.1.3.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "Bugzilla version 3.6.x ant\u00e9rieures \u00e0 la version 3.6.6 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans Bugzilla dont :\n\n-   une mauvaise validation de certains \u00e9l\u00e9ments permet de mener des\n    attaques par injection de code indirecte ;\n-   Il est possible de d\u00e9terminer l\u0027existence d\u0027\u00e9l\u00e9ments confidentiels\n    lors de la cr\u00e9ation ou de la mise \u00e0 jour de bugs ;\n-   Une mauvaise gestion de fichiers temporaires peut \u00eatre exploit\u00e9es\n    par des utilisateurs locaux pour porter atteinte \u00e0 la\n    confidentialit\u00e9 des donn\u00e9es.\n\nSe r\u00e9f\u00e9rer au bulletin de l\u0027\u00e9diteur pour plus de d\u00e9tails sur les\nvuln\u00e9rabilit\u00e9s corrig\u00e9es et les versions affect\u00e9es par ces\nvuln\u00e9rabilit\u00e9s.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n\nLes versions 3.4.12, 3.6.6, 4.0.2 et 4.1.3 corrigent ces vuln\u00e9rabilit\u00e9s.\n",
  "cves": [
    {
      "name": "CVE-2011-2381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2381"
    },
    {
      "name": "CVE-2011-2976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2976"
    },
    {
      "name": "CVE-2011-2977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2977"
    },
    {
      "name": "CVE-2011-2979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2979"
    },
    {
      "name": "CVE-2011-2978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2978"
    },
    {
      "name": "CVE-2011-2380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2380"
    },
    {
      "name": "CVE-2011-2379",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2379"
    }
  ],
  "initial_release_date": "2011-08-05T00:00:00",
  "last_revision_date": "2011-08-05T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Bugzilla du 04 ao\u00fbt 2011 :",
      "url": "http://www.bugzilla.org/security/3.4.11/"
    }
  ],
  "reference": "CERTA-2011-AVI-430",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-08-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans Bugzilla.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Bugzilla",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Bugzilla du 4 aout 2011",
      "url": null
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2011-2977 (GCVE-0-2011-2977)

Vulnerability from cvelistv5

CERTA-2011-AVI-430

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature