PT-2005-4212 · Phpbb · Phpbb

Stefan Esser · Published 2005-11-01 · Updated 2016-10-18 · CVE-2005-3416

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB versions 2.0.17 and earlier

Description The issue allows remote attackers to bypass security checks. This is possible when register globals is enabled and the session start function has not been called to handle a session. Attackers can set the $ SESSION and $HTTP SESSION VARS variables to strings instead of arrays, causing an array merge function call to fail.

Recommendations For phpBB versions 2.0.17 and earlier, consider disabling the register globals setting to prevent exploitation. Additionally, ensure that the session start function is properly called to handle sessions. As a temporary workaround, consider validating the $ SESSION and $HTTP SESSION VARS variables to ensure they are arrays before proceeding with the array merge function call.

Fix

Related Identifiers

CVE-2005-3416

DSA-925-1

Affected Products

Phpbb

References · 11

• http://securityfocus.com/bid/15243 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-3416 · Security Note
• http://securitytracker.com/id?1015121 · Vendor Advisory
• http://debian.org/security/2005/dsa-925 · Vendor Advisory
• http://hardened-php.net/advisory_172005.75.html · Vendor Advisory
• http://osvdb.org/20413 · Note
• http://secunia.com/advisories/18098 · Note
• http://marc.info/?l=bugtraq&m=113081113317600&w=2 · Note
• http://securityreason.com/securityalert/130 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3416 · Note
• http://secunia.com/advisories/17366 · Note