PT-2007-4573 · Yabb · Yabb

Krasza + 1 · Publicado 2007-06-20 · Atualizado 2018-10-16 · CVE-2007-3295

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Yet another Bulletin Board (YaBB) versions 2.1 and earlier

Description The issue allows remote authenticated users to execute arbitrary Perl code via a .. (dot dot) in the userlanguage profile setting. This setting affects the language variable in files such as HelpCentre.pl and ICQPager.pl, the use lang variable in Subs.pl, and the actlang variable in Post.pl and InstantMessage.pl. An example of exploitation involves modifying the English/HelpCentre.lng file to contain Perl statements and then invoking the help action in YaBB.pl.

Recommendations For Yet another Bulletin Board (YaBB) versions 2.1 and earlier, as a temporary workaround, consider restricting access to the userlanguage profile setting to prevent unauthorized modifications. Additionally, avoid using the userlanguage key in the member hash until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-3295

Produtos afetados

Yabb

Referências · 7

• http://securityfocus.com/archive/1/471733/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34932 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3295 · Nota de Segurança
• http://securityfocus.com/bid/24529 · Nota
• http://secunia.com/advisories/25734 · Nota
• http://osvdb.org/37238 · Nota
• http://securityreason.com/securityalert/2818 · Nota