high7.5
CVE-2001-1404
Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.
Impact
Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Bugzilla | Versions 2.4, 2.6, 2.8, 2.10, 2.12, 2.14 |
References
- NVD record
- CVE.org record
- http://bugzilla.mozilla.org/show_bug.cgi?id=74032
- http://marc.info/?l=bugtraq&m=99912899900567
- http://www.redhat.com/support/errata/RHSA-2001-107.html
- http://bugzilla.mozilla.org/show_bug.cgi?id=74032
- http://marc.info/?l=bugtraq&m=99912899900567
- http://www.redhat.com/support/errata/RHSA-2001-107.html