CVE-2003-1044

CVE-2003-1044 describes a privilege escalation vulnerability in Bugzilla versions 2.16.3 and earlier, specifically within the editproducts.cgi script when the 'usebuggroups' feature is enabled. This flaw allows users to retain group add privileges even after a group is deleted, enabling them to perform unauthorized additions to a newly created group that reuses the original group's ID. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.