high7.5
CVE-2002-0804
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by conn…
Impact
Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Bugzilla | Versions 2.14, 2.14.1, 2.16 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html
- http://bugzilla.mozilla.org/show_bug.cgi?id=129466
- http://www.iss.net/security_center/static/9301.php
- http://www.osvdb.org/6394
- http://www.redhat.com/support/errata/RHSA-2002-109.html
- http://www.securityfocus.com/bid/4964
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html
- http://bugzilla.mozilla.org/show_bug.cgi?id=129466
- http://www.iss.net/security_center/static/9301.php
- http://www.osvdb.org/6394
- http://www.redhat.com/support/errata/RHSA-2002-109.html
- http://www.securityfocus.com/bid/4964