Unrated severityNVD Advisory· Published Nov 20, 2009· Updated Apr 23, 2026
CVE-2009-3386
CVE-2009-3386
Description
Template.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to discover the alias of a private bug by reading the (1) Depends On or (2) Blocks field of a related bug.
Affected products
10cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:mozilla:bugzilla:3.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:bugzilla:3.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:bugzilla:3.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:bugzilla:3.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:bugzilla:3.4:rc1:*:*:*:*:*:*
- cpe:2.3:a:mozilla:bugzilla:3.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:bugzilla:3.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:bugzilla:3.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:bugzilla:3.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:bugzilla:3.5.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- www.bugzilla.org/security/3.4.3/nvdPatchVendor Advisory
- www.securityfocus.com/bid/37062nvdPatch
- www.vupen.com/english/advisories/2009/3288nvdPatchVendor Advisory
- bugzilla.mozilla.org/show_bug.cginvdPatch
- secunia.com/advisories/37423nvdVendor Advisory
- osvdb.org/60271nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/54332nvd
News mentions
0No linked articles in our index yet.