CVE-2004-0704 | Vulnerability Database | Aqua Security

Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products.

Affected Software

Name	Vendor	Start Version	End Version
Bugzilla	Mozilla	2.4 (including)	2.4 (including)
Bugzilla	Mozilla	2.6 (including)	2.6 (including)
Bugzilla	Mozilla	2.8 (including)	2.8 (including)
Bugzilla	Mozilla	2.10 (including)	2.10 (including)
Bugzilla	Mozilla	2.12 (including)	2.12 (including)
Bugzilla	Mozilla	2.14 (including)	2.14 (including)
Bugzilla	Mozilla	2.14.1 (including)	2.14.1 (including)
Bugzilla	Mozilla	2.14.2 (including)	2.14.2 (including)
Bugzilla	Mozilla	2.14.3 (including)	2.14.3 (including)
Bugzilla	Mozilla	2.14.4 (including)	2.14.4 (including)
Bugzilla	Mozilla	2.14.5 (including)	2.14.5 (including)
Bugzilla	Mozilla	2.16 (including)	2.16 (including)
Bugzilla	Mozilla	2.16.1 (including)	2.16.1 (including)
Bugzilla	Mozilla	2.16.2 (including)	2.16.2 (including)
Bugzilla	Mozilla	2.16.3 (including)	2.16.3 (including)
Bugzilla	Mozilla	2.16.4 (including)	2.16.4 (including)
Bugzilla	Mozilla	2.16.5 (including)	2.16.5 (including)
Bugzilla	Mozilla	2.17 (including)	2.17 (including)
Bugzilla	Mozilla	2.17.1 (including)	2.17.1 (including)
Bugzilla	Mozilla	2.17.3 (including)	2.17.3 (including)
Bugzilla	Mozilla	2.17.4 (including)	2.17.4 (including)
Bugzilla	Mozilla	2.17.5 (including)	2.17.5 (including)
Bugzilla	Mozilla	2.17.6 (including)	2.17.6 (including)
Bugzilla	Mozilla	2.17.7 (including)	2.17.7 (including)
Bugzilla	Ubuntu	dapper	*
Bugzilla	Ubuntu	devel	*
Bugzilla	Ubuntu	edgy	*
Bugzilla	Ubuntu	feisty	*

References

http://marc.info/?l=bugtraq\u0026m=108965446813639\u0026w=2
http://www.securityfocus.com/bid/10698
https://exchange.xforce.ibmcloud.com/vulnerabilities/16671

NVD	https://nvd.nist.gov/vuln/detail/CVE-2004-0704
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html