Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt.

The remote host is affected by the vulnerability described in GLSA-201006-19 (Bugzilla: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in Bugzilla. Please review     the CVE identifiers referenced below for details.
  Impact :

    A remote attacker might be able to disclose local files, bug     information, passwords, and other data under certain circumstances.
    Furthermore, a remote attacker could conduct SQL injection, Cross-Site     Scripting (XSS) or Cross-Site Request Forgery (CSRF) attacks via     various vectors.
  Workaround :

    There is no known workaround at this time.

The version of Bugzilla hosted on the remote web server allows an unauthenticated, remote attacker to list the contents of directories such as '/contrib/', which could contain sensitive information.

The remote web server is hosting a version of Bugzilla that is earlier than 3.0.11, 3.2.6, 3.4.5, or 3.5.3.  Such versions are potentially affected by multiple vulnerabilities : 

  - Bugzilla allows web browsers to serve the contents of files in the 'CVS/', 'contrib/', 'docs/en/xml', and 't/' directories as well as the 'old-params.txt' file.

  - When moving a bug from one product to another, an intermediate web page is displayed letting you select the groups the bug should be restricted to in the new product.  Because of a regression in Bugzilla 3.4.x involving groups, a private bug could temporarily become a public.

ID	Name	Product	Family	Severity
46808	GLSA-201006-19 : Bugzilla: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
44426	Bugzilla Directory Access Information Disclosure	Nessus	CGI abuses	medium
5331	Bugzilla < 3.0.11 / 3.2.6 / 3.4.5 / 3.5.3 Multiple Vulnerabilities	Nessus Network Monitor	CGI	medium

Detections

Analytics

CVE-2009-3989

high

Tenable Plugins

high

medium

medium