CVE-2003-0012: Mozilla Bugzilla

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The data collection script for Bugzilla 2.14.x before 2.14.5, 2.16.x before 2.16.2, and 2.17.x before 2.17.3 sets world-writable permissions for the data/mining directory when it runs, which allows local users to modify or delete the data.

Affected products

• Mozilla Bugzilla: version 2.14 only; version 2.14.1 only; version 2.14.2 only; version 2.14.3 only; version 2.14.4 only; version 2.16 only; …

Published 2003-01-17. Last modified 2026-06-16.