PT-2006-5351 · Apache+1 · Apache Http Server+1

Rgod · Published 2006-09-06 · Updated 2024-01-26 · CVE-2006-4558

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DeluxeBB versions 1.06 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php, specifically when run on the Apache HTTP Server with the mod mime module.

Recommendations For DeluxeBB versions 1.06 and earlier, consider restricting access to the newpost.php file or disabling the file upload functionality via the fileupload parameter until a fix is available. Additionally, restricting the use of double extensions in file uploads can help mitigate the risk of exploitation.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2006-4558

Affected Products

Apache Http Server

Deluxebb

References · 9

• 🔥 https://exploit-db.com/exploits/1797 · Exploit
• 🔥 http://retrogod.altervista.org/deluxebb_106_xpl.html · Exploit
• 🔥 http://securityreason.com/securityalert/1492 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2006-05/0318.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4558 · Security Note
• http://secunia.com/advisories/20135 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4558 · Note
• http://vupen.com/english/advisories/2006/1843 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26485 · Note