CVE-2002-0010

Published Jan 31, 2002 mozilla

Overview

CVE-2002-0010 is a known-severity vulnerability affecting mozilla bugzilla. It was published on January 31, 2002.

Technical Description

Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges.

Remediation

Check the references section for vendor advisories and patches from mozilla. Update bugzilla to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
mozilla	bugzilla	0	Affected

References

Ref archives.neohapsis.com/archives/bugtraq/2002-01/0034.html Ref archives.neohapsis.com/archives/bugtraq/2002-01/0052.html Ref bugzilla.mozilla.org/show_bug.cgi?id=108812 Ref bugzilla.mozilla.org/show_bug.cgi?id=108821 Ref bugzilla.mozilla.org/show_bug.cgi?id=108822 Ref bugzilla.mozilla.org/show_bug.cgi?id=109679 Ref bugzilla.mozilla.org/show_bug.cgi?id=109690 Ref rhn.redhat.com/errata/RHSA-2002-001.html Ref www.bugzilla.org/bugzilla2.14to2.14.1.patch Ref www.bugzilla.org/security2_14_1.html

Frequently Asked Questions

What is CVE-2002-0010?

CVE-2002-0010 is a known-severity vulnerability affecting mozilla bugzilla. It was published on January 31, 2002.

How severe is CVE-2002-0010?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2002-0010?

How can CyberStrike help with CVE-2002-0010?

CyberStrike's AI-powered security agents can automatically detect CVE-2002-0010 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.