PT-2005-1618 · Punbb · Punbb

Johannes Gumbel · Published 2005-02-27 · Updated 2017-07-11 · CVE-2005-0570

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PunBB version 1.2.1

Description The issue allows remote attackers to cause a denial of service, specifically an account lockout, by setting the user's password to NULL in the profile.php file.

Recommendations For PunBB version 1.2.1, consider restricting access to the profile.php file to prevent unauthorized password changes until a patch is available.

Fix

Related Identifiers

CVE-2005-0570

Affected Products

Punbb

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-0570 · Security Note
• http://securityfocus.com/bid/12652 · Patch
• http://secunia.com/advisories/14394 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0570 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19483 · Note
• http://marc.info/?l=bugtraq&m=110927754230666&w=2 · Note