PT-2006-4656 · Deluxebb · Deluxebb

Jessica Hope + 1 · Publicado 2006-07-21 · Atualizado 2018-10-17 · CVE-2006-3796

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DeluxeBB versions 1.07 and earlier

Description The issue arises from improper handling of a username consisting of a single space character. This allows remote authenticated users to login as the "space" user, post as the guest user, and prevent an administrator from banning the "space" user.

Recommendations For DeluxeBB versions 1.07 and earlier, update to a version that properly handles usernames to prevent exploitation.

Correção

Identificadores relacionados

CVE-2006-3796

Produtos afetados

Deluxebb

Referências · 6

• http://securityfocus.com/archive/1/440435/100/0/threaded · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047989.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3796 · Nota de Segurança
• http://securityfocus.com/bid/19052 · Nota
• http://securityreason.com/securityalert/1254 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3796 · Nota