CVE-2012-3981

Published: Sep 4, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 does not restrict the characters in a username, which might allow remote attackers to inject data into an LDAP directory via a crafted login attempt.

Affected (168)

Products: Mozilla: Bugzilla

Mozilla

1 product

Bugzilla

Configuration A

82 vulnerable

Vulnerable Software	Affected Versions
Mozilla Bugzilla	Version 2.0
Mozilla Bugzilla	Version 2.10
Mozilla Bugzilla	Version 2.12
Mozilla Bugzilla	Version 2.14.1
Mozilla Bugzilla	Version 2.14.2
Mozilla Bugzilla	Version 2.14.3
Mozilla Bugzilla	Version 2.14.4
Mozilla Bugzilla	Version 2.14.5
Mozilla Bugzilla	Version 2.14
Mozilla Bugzilla	Version 2.16.10
Mozilla Bugzilla	Version 2.16.11
Mozilla Bugzilla	Version 2.16.1
Mozilla Bugzilla	Version 2.16.2
Mozilla Bugzilla	Version 2.16.3
Mozilla Bugzilla	Version 2.16.4
Mozilla Bugzilla	Version 2.16.5
Mozilla Bugzilla	Version 2.16.6
Mozilla Bugzilla	Version 2.16.7
Mozilla Bugzilla	Version 2.16.8
Mozilla Bugzilla	Version 2.16.9
Mozilla Bugzilla	Version 2.16
Mozilla Bugzilla	Version 2.16 rc1
Mozilla Bugzilla	Version 2.16 rc2
Mozilla Bugzilla	Version 2.17.1
Mozilla Bugzilla	Version 2.17.2
Mozilla Bugzilla	Version 2.17.3
Mozilla Bugzilla	Version 2.17.4
Mozilla Bugzilla	Version 2.17.5
Mozilla Bugzilla	Version 2.17.6
Mozilla Bugzilla	Version 2.17.7
Mozilla Bugzilla	Version 2.17
Mozilla Bugzilla	Version 2.18.1
Mozilla Bugzilla	Version 2.18.2
Mozilla Bugzilla	Version 2.18.3
Mozilla Bugzilla	Version 2.18.4
Mozilla Bugzilla	Version 2.18.5
Mozilla Bugzilla	Version 2.18.6
Mozilla Bugzilla	Version 2.18.6+
Mozilla Bugzilla	Version 2.18.7
Mozilla Bugzilla	Version 2.18.8
Mozilla Bugzilla	Version 2.18.9
Mozilla Bugzilla	Version 2.18
Mozilla Bugzilla	Version 2.18 rc1
Mozilla Bugzilla	Version 2.18 rc2
Mozilla Bugzilla	Version 2.18 rc3
Mozilla Bugzilla	Version 2.19.1
Mozilla Bugzilla	Version 2.19.2
Mozilla Bugzilla	Version 2.19.3
Mozilla Bugzilla	Version 2.19
Mozilla Bugzilla	Version 2.20.1
Mozilla Bugzilla	Version 2.20.2
Mozilla Bugzilla	Version 2.20.3
Mozilla Bugzilla	Version 2.20.4
Mozilla Bugzilla	Version 2.20.5
Mozilla Bugzilla	Version 2.20.6
Mozilla Bugzilla	Version 2.20.7
Mozilla Bugzilla	Version 2.20
Mozilla Bugzilla	Version 2.20 rc1
Mozilla Bugzilla	Version 2.20 rc2
Mozilla Bugzilla	Version 2.21.1
Mozilla Bugzilla	Version 2.21.2
Mozilla Bugzilla	Version 2.21.2 rc1
Mozilla Bugzilla	Version 2.21
Mozilla Bugzilla	Version 2.22.1
Mozilla Bugzilla	Version 2.22.2
Mozilla Bugzilla	Version 2.22.3
Mozilla Bugzilla	Version 2.22.4
Mozilla Bugzilla	Version 2.22.5
Mozilla Bugzilla	Version 2.22.6
Mozilla Bugzilla	Version 2.22.7
Mozilla Bugzilla	Version 2.22
Mozilla Bugzilla	Version 2.22 rc1
Mozilla Bugzilla	Version 2.23.1
Mozilla Bugzilla	Version 2.23.2
Mozilla Bugzilla	Version 2.23.3
Mozilla Bugzilla	Version 2.23.4
Mozilla Bugzilla	Version 2.23
Mozilla Bugzilla	Version 2.2
Mozilla Bugzilla	Version 2.4
Mozilla Bugzilla	Version 2.6
Mozilla Bugzilla	Version 2.8
Mozilla Bugzilla	Version 2.9

Configuration B

69 vulnerable

Vulnerable Software	Affected Versions
Mozilla Bugzilla	Version 3.0.0
Mozilla Bugzilla	Version 3.0.10
Mozilla Bugzilla	Version 3.0.11
Mozilla Bugzilla	Version 3.0.1
Mozilla Bugzilla	Version 3.0.2
Mozilla Bugzilla	Version 3.0.3
Mozilla Bugzilla	Version 3.0.4
Mozilla Bugzilla	Version 3.0.5
Mozilla Bugzilla	Version 3.0.6
Mozilla Bugzilla	Version 3.0.7
Mozilla Bugzilla	Version 3.0.8
Mozilla Bugzilla	Version 3.0.9
Mozilla Bugzilla	Version 3.0
Mozilla Bugzilla	Version 3.0 rc1
Mozilla Bugzilla	Version 3.1.0
Mozilla Bugzilla	Version 3.1.1
Mozilla Bugzilla	Version 3.1.2
Mozilla Bugzilla	Version 3.1.3
Mozilla Bugzilla	Version 3.1.4
Mozilla Bugzilla	Version 3.2.10
Mozilla Bugzilla	Version 3.2.1
Mozilla Bugzilla	Version 3.2.2
Mozilla Bugzilla	Version 3.2.3
Mozilla Bugzilla	Version 3.2.4
Mozilla Bugzilla	Version 3.2.5
Mozilla Bugzilla	Version 3.2.6
Mozilla Bugzilla	Version 3.2.7
Mozilla Bugzilla	Version 3.2.8
Mozilla Bugzilla	Version 3.2.9
Mozilla Bugzilla	Version 3.2
Mozilla Bugzilla	Version 3.2 rc1
Mozilla Bugzilla	Version 3.2 rc2
Mozilla Bugzilla	Version 3.3.1
Mozilla Bugzilla	Version 3.3.2
Mozilla Bugzilla	Version 3.3.3
Mozilla Bugzilla	Version 3.3.4
Mozilla Bugzilla	Version 3.3
Mozilla Bugzilla	Version 3.4.10
Mozilla Bugzilla	Version 3.4.11
Mozilla Bugzilla	Version 3.4.12
Mozilla Bugzilla	Version 3.4.13
Mozilla Bugzilla	Version 3.4.1
Mozilla Bugzilla	Version 3.4.2
Mozilla Bugzilla	Version 3.4.3
Mozilla Bugzilla	Version 3.4.4
Mozilla Bugzilla	Version 3.4.5
Mozilla Bugzilla	Version 3.4.6
Mozilla Bugzilla	Version 3.4.7
Mozilla Bugzilla	Version 3.4.8
Mozilla Bugzilla	Version 3.4.9
Mozilla Bugzilla	Version 3.4
Mozilla Bugzilla	Version 3.4 rc1
Mozilla Bugzilla	Version 3.5.1
Mozilla Bugzilla	Version 3.5.2
Mozilla Bugzilla	Version 3.5.3
Mozilla Bugzilla	Version 3.5
Mozilla Bugzilla	Version 3.6.0
Mozilla Bugzilla	Version 3.6.10
Mozilla Bugzilla	Version 3.6.1
Mozilla Bugzilla	Version 3.6.2
Mozilla Bugzilla	Version 3.6.3
Mozilla Bugzilla	Version 3.6.4
Mozilla Bugzilla	Version 3.6.5
Mozilla Bugzilla	Version 3.6.6
Mozilla Bugzilla	Version 3.6.7
Mozilla Bugzilla	Version 3.6.8
Mozilla Bugzilla	Version 3.6.9
Mozilla Bugzilla	Version 3.6
Mozilla Bugzilla	Version 3.6 rc1