{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-01-21T00:00:00", "descriptions": [{"lang": "en", "value": "Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and triggering crafted input to a two-argument Perl open call, as demonstrated by shell metacharacters in a product name."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-12-30T16:57:01", "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://advisories.mageia.org/MGASA-2015-0048.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1079065"}, {"name": "FEDORA-2015-1713", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149921.html"}, {"name": "FEDORA-2015-1699", "tags": ["vendor-advisory", "x_refsource_FEDORA"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149925.html"}, {"name": "MDVSA-2015:030", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:030"}, {"name": "GLSA-201607-11", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201607-11"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.bugzilla.org/security/4.0.15/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@mozilla.org", "ID": "CVE-2014-8630", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and triggering crafted input to a two-argument Perl open call, as demonstrated by shell metacharacters in a product name."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://advisories.mageia.org/MGASA-2015-0048.html", "refsource": "CONFIRM", "url": "http://advisories.mageia.org/MGASA-2015-0048.html"}, {"name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1079065", "refsource": "CONFIRM", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1079065"}, {"name": "FEDORA-2015-1713", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149921.html"}, {"name": "FEDORA-2015-1699", "refsource": "FEDORA", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149925.html"}, {"name": "MDVSA-2015:030", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:030"}, {"name": "GLSA-201607-11", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201607-11"}, {"name": "http://www.bugzilla.org/security/4.0.15/", "refsource": "CONFIRM", "url": "http://www.bugzilla.org/security/4.0.15/"}]}}}}, "cveMetadata": {"assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "assignerShortName": "mozilla", "cveId": "CVE-2014-8630", "datePublished": "2015-02-01T15:00:00", "dateReserved": "2014-11-06T00:00:00", "dateUpdated": "2016-12-30T16:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*", "matchCriteriaId": "2A5B0526-E225-4A59-9396-01D73DE030E7", "versionEndIncluding": "4.0.16", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "85CDC579-6967-4E5C-B716-B2BC04F6DBF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "27783033-F558-427C-89A7-C3638C57F2A0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "E91557C7-8C53-49C4-8BC5-7F86D4AA09B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "50448355-F1D3-48AB-AED0-5FE027D7C199", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2:*:*:*:*:*:*:*", "matchCriteriaId": "7CE9B4E3-8044-4305-A517-E695D0831355", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2:rc1:*:*:*:*:*:*", "matchCriteriaId": "4BDA28D1-5B26-4FBA-B685-C230569AF024", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2:rc2:*:*:*:*:*:*", "matchCriteriaId": "F61B90BF-3548-4D3A-BF70-A9DC96C11775", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "AD204F45-15FE-4677-BC4C-A53F322A3B15", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "22FAFCDF-C615-4958-9C6D-E74EC11E9A62", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "4D623AEB-622E-470E-898C-A447F9C4066A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "9019921A-B8D2-4774-AB6B-673FC2FD2197", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "1DC1A059-DDE4-4442-BD90-20AB3CE0E1CC", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "4801DB4A-F828-4E95-8619-F909D5D39524", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "1E0D48CD-C77A-4D86-B091-2B8DF3ADA6D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "956C5C97-E7A8-49F2-8AC6-9570A5948395", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "281A3D1A-1F92-454D-AE09-522114FF9D8D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.10:*:*:*:*:*:*:*", "matchCriteriaId": "717B879A-EDEA-4917-A75E-2C40BB8D35D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.2.11:*:*:*:*:*:*:*", "matchCriteriaId": "F874FD21-1D5D-4F0F-BEE1-93229AA3E8A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.3:*:*:*:*:*:*:*", "matchCriteriaId": "F119CA93-4D32-4852-90AD-A23215D6CBAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "6CA9A1C4-412D-4EED-8259-04F48322238B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "27847E43-22AD-468D-8E64-8D56EA8CBE50", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "8DBB66FA-6E99-4F08-A223-6070E193B869", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.4:*:*:*:*:*:*:*", "matchCriteriaId": "D00AE646-61CC-4036-8B8F-35B818530BFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.4:rc1:*:*:*:*:*:*", "matchCriteriaId": "FF326273-99CF-40C3-B112-F5F18C94978F", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.4:rc2:*:*:*:*:*:*", "matchCriteriaId": "ECED66BE-C877-4250-AC7A-FAEAD9DAAC31", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "9FFFD96D-D0B5-47BB-91D9-3736E343711E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "4D710732-6D93-4143-874F-81B19F70FBEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "FD56846F-40B5-4A45-99DB-44C56E3A20A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "32C22A06-5F01-4C6A-886F-E3C0776C3C5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "6457398E-A1C9-4F72-BBF7-FC54118FA91C", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "47FF50AB-7156-4828-A6B5-6E7AF5152561", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.5:*:*:*:*:*:*:*", "matchCriteriaId": "5FA8C43E-AD0C-45F7-BC20-61358C7F23EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "E86608A6-8B14-4D27-A86B-1DD10E1F7825", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "D7F176CD-2EE5-4C7D-A376-4EA8918610C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "0BD5F23A-33EC-4D8A-B39D-972A048DAB0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "D1F3C39E-50A1-4005-AC0B-097A1FA6E1C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "47A322B9-DA3A-448C-BD61-3E67A98AC74E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:bugzilla:4.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "482DEB13-B194-4D5E-9C5A-E1502108741C", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*", "matchCriteriaId": "FF47C9F0-D8DA-4B55-89EB-9B2C9383ADB9", "vulnerable": true}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*", "matchCriteriaId": "56BDB5A0-0839-4A20-A003-B8CD56F48171", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Bugzilla before 4.0.16, 4.1.x and 4.2.x before 4.2.12, 4.3.x and 4.4.x before 4.4.7, and 5.x before 5.0rc1 allows remote authenticated users to execute arbitrary commands by leveraging the editcomponents privilege and triggering crafted input to a two-argument Perl open call, as demonstrated by shell metacharacters in a product name."}, {"lang": "es", "value": "Bugzilla anterior a 4.0.16, 4.1.x y 4.2.x anterior a 4.2.12, 4.3.x y 4.4.x anterior a 4.4.7, y 5.x anterior a 5.0rc1 permite a usuarios remotos autenticados ejecutar comandos arbitrarios mediante el aprovechamiento del privilegio editcomponents y la provocaci\u00f3n de entradas manipuladas en una llamada abierta de doble argumento Perl, tal y como fue demostrado mediante megacaracteres de shell en el nombre de un producto."}], "id": "CVE-2014-8630", "lastModified": "2017-01-03T02:59:20.563", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-02-01T15:59:04.353", "references": [{"source": "security@mozilla.org", "url": "http://advisories.mageia.org/MGASA-2015-0048.html"}, {"source": "security@mozilla.org", "tags": ["Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149921.html"}, {"source": "security@mozilla.org", "tags": ["Third Party Advisory"], "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149925.html"}, {"source": "security@mozilla.org", "tags": ["Patch", "Issue Tracking", "Vendor Advisory"], "url": "http://www.bugzilla.org/security/4.0.15/"}, {"source": "security@mozilla.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:030"}, {"source": "security@mozilla.org", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1079065"}, {"source": "security@mozilla.org", "url": "https://security.gentoo.org/glsa/201607-11"}], "sourceIdentifier": "security@mozilla.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}