Invision Power Board Potential IP Address Spoofing Vulnerability

Bugtraq ID:	10559
Class:	Origin Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 16 2004 12:00AM
Updated:	Jun 16 2004 12:00AM
Credit:	Discovery is credited to James B. from GulfTech Security <[email protected]>.
Vulnerable:	Invision Power Services Invision Board 1.3.1 Final Invision Power Services Invision Board 1.3 Final Invision Power Services Invision Board 1.3
Not Vulnerable:

Invision Power Board Potential IP Address Spoofing Vulnerability

It is reported that Invision Power Board is prone to an IP address spoofing vulnerability. If an attacker is using a proxy to access a remote forum, the application logs the attacker's internal IP address on the LAN, instead of the real IP address of the proxy.

This issue is reported to affect Invision Power Board version 1.3, however, it is likely that other versions are affected as well.

Invision Power Board Potential IP Address Spoofing Vulnerability

No exploit is required to carry out this attack.

Invision Power Board Potential IP Address Spoofing Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Invision Power Board Potential IP Address Spoofing Vulnerability

References:

• Invision Board Homepage (Invision Power Services)
  
• Problem With IP Logging In Invision Power Board? (GulfTech Security )