PunBB Search Dropdown Unauthorized Information Disclosure Vulnerability

Bugtraq ID:	11841
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 03 2004 12:00AM
Updated:	Jun 03 2004 12:00AM
Credit:
Vulnerable:	PunBB PunBB 1.1.4 PunBB PunBB 1.1.3 PunBB PunBB 1.1.2 PunBB PunBB 1.1.1 PunBB PunBB 1.1 PunBB PunBB 1.0.1 PunBB PunBB 1.0 RC2 PunBB PunBB 1.0 RC1 PunBB PunBB 1.0 _beta3 PunBB PunBB 1.0 _beta2 PunBB PunBB 1.0
Not Vulnerable:	PunBB PunBB 1.1.5

PunBB Search Dropdown Unauthorized Information Disclosure Vulnerability

PunBB is vulnerable to an information disclosure vulnerablity. The search dropdown list reportedly lists protected forums to unauthorized users.

PunBB Search Dropdown Unauthorized Information Disclosure Vulnerability

No exploit is required.

PunBB Search Dropdown Unauthorized Information Disclosure Vulnerability

Solution:
The issue has been addressed in PunBB 1.1.15.


PunBB PunBB 1.0 RC1

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.0

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.0 _beta2

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.0 RC2

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.0 _beta3

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.0.1

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.1

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.1.1

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.1.2

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.1.3

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB PunBB 1.1.4

• PunBB PunBB 1.1.5
  http://www.punbb.org/downloads.php

PunBB Search Dropdown Unauthorized Information Disclosure Vulnerability

References:

• PunBB Changelog (PunBB)
  
• PunBB Homepage (PunBB)