Bugzilla 3.3.1 through 3.4.4, 3.5.1, and 3.5.2 does not allow group restrictions to be preserved throughout the process of moving a bug to a different product category, which allows remote attackers to obtain sensitive information via a request for a bug in opportunistic circumstances.

The remote host is affected by the vulnerability described in GLSA-201006-19 (Bugzilla: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in Bugzilla. Please review     the CVE identifiers referenced below for details.
  Impact :

    A remote attacker might be able to disclose local files, bug     information, passwords, and other data under certain circumstances.
    Furthermore, a remote attacker could conduct SQL injection, Cross-Site     Scripting (XSS) or Cross-Site Request Forgery (CSRF) attacks via     various vectors.
  Workaround :

    There is no known workaround at this time.

A Bugzilla Security Advisory reports :

When moving a bug from one product to another, an intermediate page is displayed letting you select the groups the bug should be restricted to in the new product. However, a regression in the 3.4.x series made it ignore all groups which are not available in both products. As a workaround, you had to move the bug to the new product first and then restrict it to the desired groups, in two distinct steps, which could make the bug temporarily public.

The remote web server is hosting a version of Bugzilla that is earlier than 3.0.11, 3.2.6, 3.4.5, or 3.5.3.  Such versions are potentially affected by multiple vulnerabilities : 

  - Bugzilla allows web browsers to serve the contents of files in the 'CVS/', 'contrib/', 'docs/en/xml', and 't/' directories as well as the 'old-params.txt' file.

  - When moving a bug from one product to another, an intermediate web page is displayed letting you select the groups the bug should be restricted to in the new product.  Because of a regression in Bugzilla 3.4.x involving groups, a private bug could temporarily become a public.

ID	Name	Product	Family	Severity
46808	GLSA-201006-19 : Bugzilla: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
44346	FreeBSD : bugzilla -- information leak (696053c6-0f50-11df-a628-001517351c22)	Nessus	FreeBSD Local Security Checks	medium
5331	Bugzilla < 3.0.11 / 3.2.6 / 3.4.5 / 3.5.3 Multiple Vulnerabilities	Nessus Network Monitor	CGI	medium

Detections

Analytics

CVE-2009-3387

high

Tenable Plugins

high

medium

medium