|
|
Family: Debian Local Security Checks --> Category: infos
[DSA925] DSA-925-1 phpbb2 Vulnerability Scan
Vulnerability Scan Summary
DSA-925-1 phpbb2
Detailed Explanation for this Vulnerability Test
Several vulnerabilities have been discovered in phpBB, a fully
featured and skinnable flat webforum. The Common Vulnerabilities
and Exposures project identifies the following problems:
Multiple interpretation errors allow remote authenticated users to
inject arbitrary web script when remote avatars and avatar
uploading are enabled.
phpBB allows remote attackers to bypass protection mechanisms that
deregister global variables that allows attackers to manipulate
the behaviour of phpBB.
phpBB allows remote attackers to bypass security checks when
register_globals is enabled and the session_start function has not
been called to handle a session.
phpBB allows remote attackers to modify global variables and
bypass security mechanisms.
Multiple cross-site scripting (XSS) vulnerabilities allow remote
attackers to inject arbitrary web scripts.
An SQL injection vulnerability allows remote attackers to execute
arbitrary SQL commands.
phpBB allows remote attackers to modify regular expressions and
execute PHP code via the signature_bbcode_uid parameter.
Missing input sanitising of the topic type allows remote attackers
to inject arbitrary SQL commands.
Missing request validation permitted remote attackers to edit
private messages of other users.
The old stable distribution (woody) does not contain phpbb2 packages.
For the stable distribution (sarge) these problems have been fixed in
version 2.0.13+1-6sarge2.
For the unstable distribution (sid) these problems have been fixed in
version 2.0.18-1.
We recommend that you upgrade your phpbb2 packages.
Solution : http://www.debian.org/security/2005/dsa-925
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
