CVE-2007-0792
The mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file permissions, which allows re…
Published: 2007-02-06 · CVSS: Unscored
The mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file permissions, which allows remote attackers to obtain the database username and password via a direct request for the localconfig file.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7