CVE-2002-0009

show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu.

• http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.htmlPatch, Vendor Advisory
• http://bugzilla.mozilla.org/show_bug.cgi?id=102141Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2002-001.html
• http://www.bugzilla.org/security2_14_1.html
• http://www.iss.net/security_center/static/7802.php
• http://www.securityfocus.com/bid/3798
• http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.htmlPatch, Vendor Advisory
• http://bugzilla.mozilla.org/show_bug.cgi?id=102141Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2002-001.html
• http://www.bugzilla.org/security2_14_1.html
• http://www.iss.net/security_center/static/7802.php
• http://www.securityfocus.com/bid/3798

Published

Jan 31, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0003Buffer overflow in the preprocessor in groff 1.16 and earlie…
• CVE-2002-0004Heap corruption vulnerability in the "at" program allows loc…
• CVE-2002-0005Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8…
• CVE-2002-0006XChat 1.8.7 and earlier, including default configurations of…
• CVE-2002-0007CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows re…
• CVE-2002-0008Bugzilla before 2.14.1 allows remote attackers to (1) spoof …
• CVE-2002-0010Bugzilla before 2.14.1 allows remote attackers to inject arb…
• CVE-2002-0011Information leak in doeditvotes.cgi in Bugzilla before 2.14.…
• CVE-2002-0012Vulnerabilities in a large number of SNMP implementations al…
• CVE-2002-0013Vulnerabilities in the SNMPv1 request handling of a large nu…
• CVE-2002-0014URL-handling code in Pine 4.43 and earlier allows remote att…
• CVE-2002-0017Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 throu…