CVE-2002-0008

Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.

• http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html
• http://bugzilla.mozilla.org/show_bug.cgi?id=108385Vendor Advisory
• http://bugzilla.mozilla.org/show_bug.cgi?id=108516Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2002-001.html
• http://www.bugzilla.org/security2_14_1.htmlVendor Advisory
• http://www.iss.net/security_center/static/7804.php
• http://www.iss.net/security_center/static/7805.php
• http://www.securityfocus.com/bid/3793
• http://www.securityfocus.com/bid/3794
• http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html
• http://bugzilla.mozilla.org/show_bug.cgi?id=108385Vendor Advisory
• http://bugzilla.mozilla.org/show_bug.cgi?id=108516Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2002-001.html
• http://www.bugzilla.org/security2_14_1.htmlVendor Advisory
• http://www.iss.net/security_center/static/7804.php
• http://www.iss.net/security_center/static/7805.php
• http://www.securityfocus.com/bid/3793
• http://www.securityfocus.com/bid/3794

Published

Jan 31, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0002Format string vulnerability in stunnel before 3.22 when used…
• CVE-2002-0003Buffer overflow in the preprocessor in groff 1.16 and earlie…
• CVE-2002-0004Heap corruption vulnerability in the "at" program allows loc…
• CVE-2002-0005Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8…
• CVE-2002-0006XChat 1.8.7 and earlier, including default configurations of…
• CVE-2002-0007CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows re…
• CVE-2002-0009show_bug.cgi in Bugzilla before 2.14.1 allows a user with "B…
• CVE-2002-0010Bugzilla before 2.14.1 allows remote attackers to inject arb…
• CVE-2002-0011Information leak in doeditvotes.cgi in Bugzilla before 2.14.…
• CVE-2002-0012Vulnerabilities in a large number of SNMP implementations al…
• CVE-2002-0013Vulnerabilities in the SNMPv1 request handling of a large nu…
• CVE-2002-0014URL-handling code in Pine 4.43 and earlier allows remote att…