CVE-2001-0330

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-06-27 · updated 2026-06-16

Description

Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed.

Affected products

Mozilla Bugzilla: 2.4, 2.6, 2.8, 2.10

References

http://www.atstake.com/research/advisories/2001/a043001-1.txt
http://www.securityfocus.com/bid/2671
https://exchange.xforce.ibmcloud.com/vulnerabilities/6489
http://www.atstake.com/research/advisories/2001/a043001-1.txt
http://www.securityfocus.com/bid/2671
https://exchange.xforce.ibmcloud.com/vulnerabilities/6489

Get alerted when CVE-2001-0330 or the next vulnerability affects your stack