PT-2005-4212 · Phpbb · Phpbb

Stefan Esser · Publicado 2005-11-01 · Atualizado 2016-10-18 · CVE-2005-3416

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB versions 2.0.17 and earlier

Description The issue allows remote attackers to bypass security checks. This is possible when register globals is enabled and the session start function has not been called to handle a session. Attackers can set the $ SESSION and $HTTP SESSION VARS variables to strings instead of arrays, causing an array merge function call to fail.

Recommendations For phpBB versions 2.0.17 and earlier, consider disabling the register globals setting to prevent exploitation. Additionally, ensure that the session start function is properly called to handle sessions. As a temporary workaround, consider validating the $ SESSION and $HTTP SESSION VARS variables to ensure they are arrays before proceeding with the array merge function call.

Correção

Identificadores relacionados

CVE-2005-3416

DSA-925-1

Produtos afetados

Phpbb

Referências · 11

• http://securityfocus.com/bid/15243 · Correção
• http://osvdb.org/20413 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3416 · Nota de Segurança
• http://secunia.com/advisories/18098 · Nota
• http://securitytracker.com/id?1015121 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=113081113317600&w=2 · Nota
• http://debian.org/security/2005/dsa-925 · Aviso do Fabricante
• http://securityreason.com/securityalert/130 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3416 · Nota
• http://hardened-php.net/advisory_172005.75.html · Aviso do Fabricante
• http://secunia.com/advisories/17366 · Nota