CVE-2002-0804 in Bugzilla

Résumé

par MITRE

Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Divulgation: 12/08/2002
• Modérer: accepté
• Entrée: VDB-18690
• CPE: prêt
• CWE: CWE-269 (confirmé)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00552
• KEV: non
• Activités: très faible
• Secteur: Telecommunication, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0804
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0804
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0804/