Unscored DSA-265 4 CVEs

bonsai - several vulnerabilities

Published Mar 21, 2003 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 3.0	bonsai	1.3+cvs20020224-1woody1

Vulnerabilities 4

Unscored —

CVE-2003-0152

Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www…

Mar 26, 2003
Unscored —

CVE-2003-0153 Public exploit

bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog…

Mar 26, 2003
Unscored —

CVE-2003-0154 Public exploit

Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary…

Mar 26, 2003
Unscored —

CVE-2003-0155

bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.

Mar 26, 2003