CVE-2001-0329: Mozilla Bugzilla

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login cookie in post_bug.cgi, or (2) the who parameter in process_bug.cgi.

Affected products

• Mozilla Bugzilla: version 2.4 only; version 2.6 only; version 2.8 only; version 2.10 only

Published 2001-06-27. Last modified 2026-06-16.