CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-4534

The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.015

EPSS Ranking 80.5%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2005-4534

Mozilla » Bugzilla » Version: 2.10

cpe:2.3:a:mozilla:bugzilla:2.10
Mozilla » Bugzilla » Version: 2.12

cpe:2.3:a:mozilla:bugzilla:2.12
Mozilla » Bugzilla » Version: 2.14

cpe:2.3:a:mozilla:bugzilla:2.14
Mozilla » Bugzilla » Version: 2.14.1

cpe:2.3:a:mozilla:bugzilla:2.14.1
Mozilla » Bugzilla » Version: 2.14.2

cpe:2.3:a:mozilla:bugzilla:2.14.2
Mozilla » Bugzilla » Version: 2.14.3

cpe:2.3:a:mozilla:bugzilla:2.14.3
Mozilla » Bugzilla » Version: 2.14.4

cpe:2.3:a:mozilla:bugzilla:2.14.4
Mozilla » Bugzilla » Version: 2.14.5

cpe:2.3:a:mozilla:bugzilla:2.14.5
Mozilla » Bugzilla » Version: 2.16

cpe:2.3:a:mozilla:bugzilla:2.16
Mozilla » Bugzilla » Version: 2.16.1

cpe:2.3:a:mozilla:bugzilla:2.16.1
Mozilla » Bugzilla » Version: 2.16.10

cpe:2.3:a:mozilla:bugzilla:2.16.10
Mozilla » Bugzilla » Version: 2.16.2

cpe:2.3:a:mozilla:bugzilla:2.16.2
Mozilla » Bugzilla » Version: 2.16.3

cpe:2.3:a:mozilla:bugzilla:2.16.3
Mozilla » Bugzilla » Version: 2.16.4

cpe:2.3:a:mozilla:bugzilla:2.16.4
Mozilla » Bugzilla » Version: 2.16.5

cpe:2.3:a:mozilla:bugzilla:2.16.5
Mozilla » Bugzilla » Version: 2.16.6

cpe:2.3:a:mozilla:bugzilla:2.16.6
Mozilla » Bugzilla » Version: 2.16.7

cpe:2.3:a:mozilla:bugzilla:2.16.7
Mozilla » Bugzilla » Version: 2.16.8

cpe:2.3:a:mozilla:bugzilla:2.16.8
Mozilla » Bugzilla » Version: 2.16.9

cpe:2.3:a:mozilla:bugzilla:2.16.9
Mozilla » Bugzilla » Version: 2.9

cpe:2.3:a:mozilla:bugzilla:2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-4534

Products

Pricing

Contact Us