FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-2759

This CVE name corresponds to:

Entered	Topic
2010-08-24	bugzilla -- information disclosure, denial of service

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2010-2759 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2010-2759
Phase	Assigned(20100714)

Description

Bugzilla 2.23.1 through 3.2.7, 3.3.1 through 3.4.7, 3.5.1 through 3.6.1, and 3.7 through 3.7.2, when PostgreSQL is used, does not properly handle large integers in (1) bug and (2) attachment phrases, which allows remote authenticated users to cause a denial of service (bug invisibility) via a crafted comment.

References

Source	Reference
CONFIRM	http://www.bugzilla.org/security/3.2.7/
CONFIRM	https://bugzilla.mozilla.org/show_bug.cgi?id=583690
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=623423
FEDORA	FEDORA-2010-13072
FEDORA	FEDORA-2010-13086
FEDORA	FEDORA-2010-13171
BID	42275
SECUNIA	40892
SECUNIA	41128
VUPEN	ADV-2010-2035
VUPEN	ADV-2010-2205