bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.Referenceshttp://www.securityfocus.com/bid/7163http://www.debian.org/security/2003/dsa-265