CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2105

email_in.pl in Bugzilla 2.23.4, 3.0.x before 3.0.4, and 3.1.x before 3.1.4 allows remote authenticated users to more easily spoof the changer of a bug via a @reporter command in the body of an e-mail message, which overrides the e-mail address as normally obtained from the From e-mail header. NOTE: since From headers are easily spoofed, this only crosses privilege boundaries in environments that provide additional verification of e-mail addresses.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 64.9%

CVSS Severity

CVSS v2 Score 3.5

References

Products affected by CVE-2008-2105

Mozilla » Bugzilla » Version: 2.10

cpe:2.3:a:mozilla:bugzilla:2.10
Mozilla » Bugzilla » Version: 2.12

cpe:2.3:a:mozilla:bugzilla:2.12
Mozilla » Bugzilla » Version: 2.14

cpe:2.3:a:mozilla:bugzilla:2.14
Mozilla » Bugzilla » Version: 2.14.1

cpe:2.3:a:mozilla:bugzilla:2.14.1
Mozilla » Bugzilla » Version: 2.14.2

cpe:2.3:a:mozilla:bugzilla:2.14.2
Mozilla » Bugzilla » Version: 2.14.3

cpe:2.3:a:mozilla:bugzilla:2.14.3
Mozilla » Bugzilla » Version: 2.14.4

cpe:2.3:a:mozilla:bugzilla:2.14.4
Mozilla » Bugzilla » Version: 2.14.5

cpe:2.3:a:mozilla:bugzilla:2.14.5
Mozilla » Bugzilla » Version: 2.16

cpe:2.3:a:mozilla:bugzilla:2.16
Mozilla » Bugzilla » Version: 2.16.1

cpe:2.3:a:mozilla:bugzilla:2.16.1
Mozilla » Bugzilla » Version: 2.16.10

cpe:2.3:a:mozilla:bugzilla:2.16.10
Mozilla » Bugzilla » Version: 2.16.11

cpe:2.3:a:mozilla:bugzilla:2.16.11
Mozilla » Bugzilla » Version: 2.16.2

cpe:2.3:a:mozilla:bugzilla:2.16.2
Mozilla » Bugzilla » Version: 2.16.3

cpe:2.3:a:mozilla:bugzilla:2.16.3
Mozilla » Bugzilla » Version: 2.16.4

cpe:2.3:a:mozilla:bugzilla:2.16.4
Mozilla » Bugzilla » Version: 2.16.5

cpe:2.3:a:mozilla:bugzilla:2.16.5
Mozilla » Bugzilla » Version: 2.16.6

cpe:2.3:a:mozilla:bugzilla:2.16.6
Mozilla » Bugzilla » Version: 2.16.7

cpe:2.3:a:mozilla:bugzilla:2.16.7
Mozilla » Bugzilla » Version: 2.16.8

cpe:2.3:a:mozilla:bugzilla:2.16.8
Mozilla » Bugzilla » Version: 2.16.9

cpe:2.3:a:mozilla:bugzilla:2.16.9
Mozilla » Bugzilla » Version: 2.16_rc2

cpe:2.3:a:mozilla:bugzilla:2.16_rc2
Mozilla » Bugzilla » Version: 2.17.1

cpe:2.3:a:mozilla:bugzilla:2.17.1
Mozilla » Bugzilla » Version: 2.17.2

cpe:2.3:a:mozilla:bugzilla:2.17.2
Mozilla » Bugzilla » Version: 2.17.3

cpe:2.3:a:mozilla:bugzilla:2.17.3
Mozilla » Bugzilla » Version: 2.17.4

cpe:2.3:a:mozilla:bugzilla:2.17.4
Mozilla » Bugzilla » Version: 2.17.5

cpe:2.3:a:mozilla:bugzilla:2.17.5
Mozilla » Bugzilla » Version: 2.17.6

cpe:2.3:a:mozilla:bugzilla:2.17.6
Mozilla » Bugzilla » Version: 2.17.7

cpe:2.3:a:mozilla:bugzilla:2.17.7
Mozilla » Bugzilla » Version: 2.18

cpe:2.3:a:mozilla:bugzilla:2.18
Mozilla » Bugzilla » Version: 2.18.1

cpe:2.3:a:mozilla:bugzilla:2.18.1
Mozilla » Bugzilla » Version: 2.18.2

cpe:2.3:a:mozilla:bugzilla:2.18.2
Mozilla » Bugzilla » Version: 2.18.3

cpe:2.3:a:mozilla:bugzilla:2.18.3
Mozilla » Bugzilla » Version: 2.18.4

cpe:2.3:a:mozilla:bugzilla:2.18.4
Mozilla » Bugzilla » Version: 2.18.5

cpe:2.3:a:mozilla:bugzilla:2.18.5
Mozilla » Bugzilla » Version: 2.18.6

cpe:2.3:a:mozilla:bugzilla:2.18.6
Mozilla » Bugzilla » Version: 2.19.1

cpe:2.3:a:mozilla:bugzilla:2.19.1
Mozilla » Bugzilla » Version: 2.19.2

cpe:2.3:a:mozilla:bugzilla:2.19.2
Mozilla » Bugzilla » Version: 2.19.3

cpe:2.3:a:mozilla:bugzilla:2.19.3
Mozilla » Bugzilla » Version: 2.20

cpe:2.3:a:mozilla:bugzilla:2.20
Mozilla » Bugzilla » Version: 2.20.1

cpe:2.3:a:mozilla:bugzilla:2.20.1
Mozilla » Bugzilla » Version: 2.20.2

cpe:2.3:a:mozilla:bugzilla:2.20.2
Mozilla » Bugzilla » Version: 2.20.3

cpe:2.3:a:mozilla:bugzilla:2.20.3
Mozilla » Bugzilla » Version: 2.20.4

cpe:2.3:a:mozilla:bugzilla:2.20.4
Mozilla » Bugzilla » Version: 2.20.5

cpe:2.3:a:mozilla:bugzilla:2.20.5
Mozilla » Bugzilla » Version: 2.20.6

cpe:2.3:a:mozilla:bugzilla:2.20.6
Mozilla » Bugzilla » Version: 2.21.1

cpe:2.3:a:mozilla:bugzilla:2.21.1
Mozilla » Bugzilla » Version: 2.21.2

cpe:2.3:a:mozilla:bugzilla:2.21.2
Mozilla » Bugzilla » Version: 2.22

cpe:2.3:a:mozilla:bugzilla:2.22
Mozilla » Bugzilla » Version: 2.22.1

cpe:2.3:a:mozilla:bugzilla:2.22.1
Mozilla » Bugzilla » Version: 2.22.2

cpe:2.3:a:mozilla:bugzilla:2.22.2
Mozilla » Bugzilla » Version: 2.22.3

cpe:2.3:a:mozilla:bugzilla:2.22.3
Mozilla » Bugzilla » Version: 2.22.4

cpe:2.3:a:mozilla:bugzilla:2.22.4
Mozilla » Bugzilla » Version: 2.23

cpe:2.3:a:mozilla:bugzilla:2.23
Mozilla » Bugzilla » Version: 2.23.1

cpe:2.3:a:mozilla:bugzilla:2.23.1
Mozilla » Bugzilla » Version: 2.23.2

cpe:2.3:a:mozilla:bugzilla:2.23.2
Mozilla » Bugzilla » Version: 2.23.3

cpe:2.3:a:mozilla:bugzilla:2.23.3
Mozilla » Bugzilla » Version: 2.23.4

cpe:2.3:a:mozilla:bugzilla:2.23.4
Mozilla » Bugzilla » Version: 2.4

cpe:2.3:a:mozilla:bugzilla:2.4
Mozilla » Bugzilla » Version: 2.6

cpe:2.3:a:mozilla:bugzilla:2.6
Mozilla » Bugzilla » Version: 2.8

cpe:2.3:a:mozilla:bugzilla:2.8
Mozilla » Bugzilla » Version: 3.0.0

cpe:2.3:a:mozilla:bugzilla:3.0.0
Mozilla » Bugzilla » Version: 3.0.1

cpe:2.3:a:mozilla:bugzilla:3.0.1
Mozilla » Bugzilla » Version: 3.0.2

cpe:2.3:a:mozilla:bugzilla:3.0.2
Mozilla » Bugzilla » Version: 3.1.0

cpe:2.3:a:mozilla:bugzilla:3.1.0
Mozilla » Bugzilla » Version: 3.1.1

cpe:2.3:a:mozilla:bugzilla:3.1.1
Mozilla » Bugzilla » Version: 3.1.2

cpe:2.3:a:mozilla:bugzilla:3.1.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2105

Products

Pricing

Contact Us