PT-2002-1524 · Phpbb · Phpbb

Publicado 2002-08-12 · Atualizado 2016-09-17 · CVE-2002-0473

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions phpBB versions 2.0 and earlier

Description The issue allows remote attackers to execute arbitrary code from remote servers. This is achieved by exploiting the phpbb root path parameter in the db.php file.

Recommendations For phpBB versions 2.0 and earlier, consider restricting access to the db.php file until a patch is available. As a temporary workaround, avoid using the phpbb root path parameter in the db.php file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0473

Produtos afetados

Phpbb

Referências · 10

• http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.1.zip · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-03/0229.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0473 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0473 · Nota
• http://iss.net/security_center/static/8476.php · Aviso do Fabricante
• http://securityfocus.com/bid/4380 · Aviso do Fabricante
• http://online.securityfocus.com/archive/82/262600 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2002-03/0221.html · Nota
• http://phpbb.sourceforge.net/phpBB2/viewtopic.php?t=9483 · Nota
• http://osvdb.org/4268 · Nota