PT-2000-2009 · Phorum · Phorum

Publicado 2000-12-31 · Atualizado 2008-09-05 · CVE-2000-1230

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Phorum version 3.0.7

Description A backdoor in the auth.php3 file allows remote attackers to access restricted web pages by sending an HTTP request with the PHP AUTH USER parameter set to "boogieman".

Recommendations For Phorum version 3.0.7, update the auth.php3 file to remove the backdoor or apply a patch that fixes this issue. As a temporary workaround, consider restricting access to the auth.php3 file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2000-1230

Produtos afetados

Phorum

Referências · 7

• 🔥 https://exploit-db.com/exploits/20588 · Exploit
• 🔥 http://digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm · Exploit
• 🔥 http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html · Exploit
• http://securityfocus.com/bid/2274 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1230 · Nota de Segurança
• http://hispahack.ccc.de/mi020.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1230 · Nota