PT-2005-4216 · Phpbb · Phpbb

Stefan Esser · Publicado 2005-11-01 · Atualizado 2016-10-18 · CVE-2005-3420

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB version 2.0.17

Description The issue allows remote attackers to modify regular expressions and execute PHP code via the signature bbcode uid parameter in the "usercp register.php" file. This can be achieved by injecting an "e" modifier into a preg replace statement, enabling the execution of arbitrary PHP code.

Recommendations For phpBB version 2.0.17, consider disabling the signature bbcode uid parameter in the "usercp register.php" file as a temporary workaround until a patch is available. Restrict access to the "usercp register.php" file to minimize the risk of exploitation. Avoid using the signature bbcode uid parameter until the issue is resolved.

Correção

Identificadores relacionados

CVE-2005-3420

DSA-925-1

Produtos afetados

Phpbb

Referências · 12

• http://securityfocus.com/bid/15243 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3420 · Nota
• http://secunia.com/advisories/18098 · Nota
• http://securitytracker.com/id?1015121 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=113081113317600&w=2 · Nota
• http://debian.org/security/2005/dsa-925 · Aviso do Fabricante
• http://securityreason.com/securityalert/130 · Nota
• http://vupen.com/english/advisories/2005/2250 · Nota
• http://osvdb.org/20391 · Correção
• http://hardened-php.net/advisory_172005.75.html · Aviso do Fabricante
• http://secunia.com/advisories/17366 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3420 · Nota de Segurança