PT-2005-1618 · Punbb · Punbb

Johannes Gumbel · Publicado 2005-02-27 · Atualizado 2017-07-11 · CVE-2005-0570

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PunBB version 1.2.1

Description The issue allows remote attackers to cause a denial of service, specifically an account lockout, by setting the user's password to NULL in the profile.php file.

Recommendations For PunBB version 1.2.1, consider restricting access to the profile.php file to prevent unauthorized password changes until a patch is available.

Correção

Identificadores relacionados

CVE-2005-0570

Produtos afetados

Punbb

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-0570 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0570 · Nota
• http://securityfocus.com/bid/12652 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19483 · Nota
• http://marc.info/?l=bugtraq&m=110927754230666&w=2 · Nota
• http://secunia.com/advisories/14394 · Aviso do Fabricante