VBulletin Init.PHP Unspecified Remote Vulnerability

Bugtraq ID:	12299
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 18 2005 12:00AM
Updated:	Jan 18 2005 12:00AM
Credit:	The vendor reported this vulnerability.
Vulnerable:	VBulletin VBulletin 3.0.4 VBulletin VBulletin 3.0.3 VBulletin VBulletin 3.0.2 VBulletin VBulletin 3.0.1 VBulletin VBulletin 3.0 Gamma VBulletin VBulletin 3.0 beta 7 VBulletin VBulletin 3.0 beta 6 VBulletin VBulletin 3.0 beta 5 VBulletin VBulletin 3.0 beta 4 VBulletin VBulletin 3.0 beta 3 VBulletin VBulletin 3.0 beta 2 VBulletin VBulletin 3.0
Not Vulnerable:	VBulletin VBulletin 3.0.5

VBulletin Init.PHP Unspecified Remote Vulnerability

VBulletin is reported prone to an unspecified vulnerability that presents itself in the 'includes/init.php' script.

It is reported that this vulnerability may be exploited to compromise an affected VBulletin installation; this compromise may include information disclosure.

This BID will be updated, as further information regarding this vulnerability is made available.

VBulletin Init.PHP Unspecified Remote Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

VBulletin Init.PHP Unspecified Remote Vulnerability

Solution:
The vendor has released VBulletin version 3.0.5 to address this vulnerability. Customers are advised to contact the vendor for further details in regard to obtaining and applying an appropriate update.

VBulletin Init.PHP Unspecified Remote Vulnerability

References:

• vBulletin 3.0.5 Released (VBulletin)
  
• Vendor Homepage (Kyberna)