CVE-2009-3989

Published: Feb 3, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Bugzilla before 3.0.11, 3.2.x before 3.2.6, 3.4.x before 3.4.5, and 3.5.x before 3.5.3 does not block access to files and directories that are used by custom installations, which allows remote attackers to obtain sensitive information via requests for (1) CVS/, (2) contrib/, (3) docs/en/xml/, (4) t/, or (5) old-params.txt.

Affected (85)

Products: Mozilla: Bugzilla

Mozilla

1 product

Bugzilla

Configuration A

85 vulnerable

Vulnerable Software	Affected Versions
Mozilla Bugzilla	Up to 3.0.10
Mozilla Bugzilla	Version 2.0
Mozilla Bugzilla	Version 2.10
Mozilla Bugzilla	Version 2.12
Mozilla Bugzilla	Version 2.14.1
Mozilla Bugzilla	Version 2.14.2
Mozilla Bugzilla	Version 2.14.3
Mozilla Bugzilla	Version 2.14.4
Mozilla Bugzilla	Version 2.14.5
Mozilla Bugzilla	Version 2.14
Mozilla Bugzilla	Version 2.16.10
Mozilla Bugzilla	Version 2.16.11
Mozilla Bugzilla	Version 2.16.1
Mozilla Bugzilla	Version 2.16.2
Mozilla Bugzilla	Version 2.16.3
Mozilla Bugzilla	Version 2.16.4
Mozilla Bugzilla	Version 2.16.5
Mozilla Bugzilla	Version 2.16.6
Mozilla Bugzilla	Version 2.16.7
Mozilla Bugzilla	Version 2.16.8
Mozilla Bugzilla	Version 2.16.9
Mozilla Bugzilla	Version 2.16
Mozilla Bugzilla	Version 2.16 rc1
Mozilla Bugzilla	Version 2.16 rc2
Mozilla Bugzilla	Version 2.18.1
Mozilla Bugzilla	Version 2.18.2
Mozilla Bugzilla	Version 2.18.3
Mozilla Bugzilla	Version 2.18.4
Mozilla Bugzilla	Version 2.18.5
Mozilla Bugzilla	Version 2.18.6
Mozilla Bugzilla	Version 2.18.6+
Mozilla Bugzilla	Version 2.18.7
Mozilla Bugzilla	Version 2.18.8
Mozilla Bugzilla	Version 2.18.9
Mozilla Bugzilla	Version 2.18
Mozilla Bugzilla	Version 2.18 rc1
Mozilla Bugzilla	Version 2.18 rc2
Mozilla Bugzilla	Version 2.18 rc3
Mozilla Bugzilla	Version 2.20.1
Mozilla Bugzilla	Version 2.20.2
Mozilla Bugzilla	Version 2.20.3
Mozilla Bugzilla	Version 2.20.4
Mozilla Bugzilla	Version 2.20.5
Mozilla Bugzilla	Version 2.20.6
Mozilla Bugzilla	Version 2.20.7
Mozilla Bugzilla	Version 2.20
Mozilla Bugzilla	Version 2.20 rc1
Mozilla Bugzilla	Version 2.20 rc2
Mozilla Bugzilla	Version 2.22.1
Mozilla Bugzilla	Version 2.22.2
Mozilla Bugzilla	Version 2.22.3
Mozilla Bugzilla	Version 2.22.4
Mozilla Bugzilla	Version 2.22.5
Mozilla Bugzilla	Version 2.22.6
Mozilla Bugzilla	Version 2.22.7
Mozilla Bugzilla	Version 2.22
Mozilla Bugzilla	Version 2.22 rc1
Mozilla Bugzilla	Version 2.2
Mozilla Bugzilla	Version 2.4
Mozilla Bugzilla	Version 2.6
Mozilla Bugzilla	Version 2.8
Mozilla Bugzilla	Version 3.0.0
Mozilla Bugzilla	Version 3.0.1
Mozilla Bugzilla	Version 3.0.2
Mozilla Bugzilla	Version 3.0.3
Mozilla Bugzilla	Version 3.0.4
Mozilla Bugzilla	Version 3.0.5
Mozilla Bugzilla	Version 3.0.6
Mozilla Bugzilla	Version 3.0.7
Mozilla Bugzilla	Version 3.0.8
Mozilla Bugzilla	Version 3.0.9
Mozilla Bugzilla	Version 3.2.1
Mozilla Bugzilla	Version 3.2.2
Mozilla Bugzilla	Version 3.2.3
Mozilla Bugzilla	Version 3.2.4
Mozilla Bugzilla	Version 3.2.5
Mozilla Bugzilla	Version 3.2
Mozilla Bugzilla	Version 3.4.1
Mozilla Bugzilla	Version 3.4.2
Mozilla Bugzilla	Version 3.4.3
Mozilla Bugzilla	Version 3.4.4
Mozilla Bugzilla	Version 3.4
Mozilla Bugzilla	Version 3.5.1
Mozilla Bugzilla	Version 3.5.2
Mozilla Bugzilla	Version 3.5