PT-2007-4573 · Yabb · Yabb

Krasza + 1 · Published 2007-06-20 · Updated 2018-10-16 · CVE-2007-3295

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Yet another Bulletin Board (YaBB) versions 2.1 and earlier

Description The issue allows remote authenticated users to execute arbitrary Perl code via a .. (dot dot) in the userlanguage profile setting. This setting affects the language variable in files such as HelpCentre.pl and ICQPager.pl, the use lang variable in Subs.pl, and the actlang variable in Post.pl and InstantMessage.pl. An example of exploitation involves modifying the English/HelpCentre.lng file to contain Perl statements and then invoking the help action in YaBB.pl.

Recommendations For Yet another Bulletin Board (YaBB) versions 2.1 and earlier, as a temporary workaround, consider restricting access to the userlanguage profile setting to prevent unauthorized modifications. Additionally, avoid using the userlanguage key in the member hash until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-3295

Affected Products

Yabb

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-3295 · Security Note
• http://securityfocus.com/archive/1/471733/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34932 · Note
• http://securityfocus.com/bid/24529 · Note
• http://secunia.com/advisories/25734 · Note
• http://osvdb.org/37238 · Note
• http://securityreason.com/securityalert/2818 · Note