Unscored DSA-230 2 CVEs

bugzilla - insecure permissions, spurious backup files

Published Jan 16, 2003 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	bugzilla	2.14.2-0woody4

Vulnerabilities 2

Unscored —

CVE-2003-0012

The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world…

Sep 1, 2004
Unscored —

CVE-2003-0013

The default .htaccess scripts for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 do not …

Sep 1, 2004