CVE-2001-1405

security flaw

Published Aug 31, 2002 CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2001-1385 Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 4:51 AM
Reserved
Aug 30, 2002, 12:00 AM
Status
Modified
Published
Sep 10, 2001, 4:00 AM
Modified
Jun 16, 2026, 9:56 PM
Severity
Public date
Aug 29, 2001, 12:00 AM