PT-2005-2783 · Invision · Invision Power Board

Published 2005-06-01 · Updated 2008-09-05 · CVE-2005-1816

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Invision Power Board (IPB) versions 1.0 through 2.0.4

Description The issue allows non-root admins to elevate their privileges or those of other users by adding them to the root admin group. This is achieved through the "Move users in this group to" screen.

Recommendations For Invision Power Board (IPB) versions 1.0 through 2.0.4, restrict access to the "Move users in this group to" screen to prevent non-root admins from modifying group memberships.

Exploit

Fix

Related Identifiers

CVE-2005-1816

Affected Products

Invision Power Board

References · 5

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0635.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1816 · Security Note
• http://securityfocus.com/bid/13797 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1816 · Note
• http://secunia.com/advisories/15545 · Note