PT-2005-4216 · Phpbb · Phpbb

Stefan Esser · Published 2005-11-01 · Updated 2016-10-18 · CVE-2005-3420

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpBB version 2.0.17

Description The issue allows remote attackers to modify regular expressions and execute PHP code via the signature bbcode uid parameter in the "usercp register.php" file. This can be achieved by injecting an "e" modifier into a preg replace statement, enabling the execution of arbitrary PHP code.

Recommendations For phpBB version 2.0.17, consider disabling the signature bbcode uid parameter in the "usercp register.php" file as a temporary workaround until a patch is available. Restrict access to the "usercp register.php" file to minimize the risk of exploitation. Avoid using the signature bbcode uid parameter until the issue is resolved.

Fix

Related Identifiers

CVE-2005-3420

DSA-925-1

Affected Products

Phpbb

References · 12

• http://securityfocus.com/bid/15243 · Patch
• http://securitytracker.com/id?1015121 · Vendor Advisory
• http://debian.org/security/2005/dsa-925 · Vendor Advisory
• http://osvdb.org/20391 · Patch
• http://hardened-php.net/advisory_172005.75.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3420 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3420 · Note
• http://secunia.com/advisories/18098 · Note
• http://marc.info/?l=bugtraq&m=113081113317600&w=2 · Note
• http://securityreason.com/securityalert/130 · Note
• http://vupen.com/english/advisories/2005/2250 · Note
• http://secunia.com/advisories/17366 · Note