PT-2005-4211 · Phpbb · Phpbb

Stefan Esser · Published 2005-11-01 · Updated 2017-07-11 · CVE-2005-3415

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB versions 2.0.17 and earlier

Description The issue allows remote attackers to bypass protection mechanisms by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name. This causes phpBB to unset the GLOBALS[] variable but not the GPC variable, potentially leading to exploitation.

Recommendations For phpBB versions 2.0.17 and earlier, consider updating to a newer version to mitigate the risk, as the exact fix version is not specified. As a temporary workaround, restrict the setting of GLOBALS[] variables to minimize the risk of exploitation. Avoid using the same name for both GPC and GLOBALS[] variables in the affected code until the issue is resolved.

Fix

Related Identifiers

CVE-2005-3415

DSA-925-1

Affected Products

Phpbb

References · 12

• http://securityfocus.com/bid/15243 · Patch
• http://securitytracker.com/id?1015121 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3415 · Security Note
• http://debian.org/security/2005/dsa-925 · Vendor Advisory
• http://hardened-php.net/advisory_172005.75.html · Vendor Advisory
• http://secunia.com/advisories/18098 · Note
• http://osvdb.org/20386 · Note
• http://marc.info/?l=bugtraq&m=113081113317600&w=2 · Note
• http://securityreason.com/securityalert/130 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22914 · Note
• http://secunia.com/advisories/17366 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3415 · Note