CVE-2005-2174
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/07/2005
Last modified:
03/04/2025
Description
Bugzilla 2.17.x, 2.18 before 2.18.2, 2.19.x, and 2.20 before 2.20rc1 inserts a bug into the database before it is marked private, which introduces a race condition and allows attackers to access information about the bug via buglist.cgi before MySQL replication is complete.
Impact
Base Score 2.0
2.60
Severity 2.0
LOW
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.18:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.18:rc3:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.18.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.19.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.19.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:mozilla:bugzilla:2.19.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page