Unscored CVE-2001-1405 EUVD-2001-1385GHSA-j2c7-fx5p-x2jv

Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) v…

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi.

References

http://bugzilla.mozilla.org/show_bug.cgi?id=54556
20010829 Security Advisory for Bugzilla v2.13 and older mailing-list
RHSA-2001:107 vendor-advisory