CVE-2012-3981 in Mozilla Bugzilla

Zusammenfassung (Englisch)

Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 does not restrict the characters in a username, which might allow remote attackers to inject data into an LDAP directory via a crafted login attempt.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservieren

11.07.2012

Veröffentlichung

04.09.2012

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
6084	Mozilla Bugzilla Username search erweiterte Rechte	255	Proof-of-Concept	Offizieller Fix	CVE-2012-3981
6082	Mozilla Bugzilla Extension Directory Browser erweiterte Rechte	255	Proof-of-Concept	Offizieller Fix	CVE-2012-3981

Quellen

• MITRE
• NVD
• CVE Details