PHPBB Session.PHP Autologin User_Level Privilege Escalation Vulnerability
BID:12736
Info
PHPBB Session.PHP Autologin User_Level Privilege Escalation Vulnerability
| Bugtraq ID: | 12736 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 07 2005 12:00AM |
| Updated: | Mar 07 2005 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Some one <[email protected]>. |
| Vulnerable: |
phpBB Group phpBB 2.0.13 phpBB Group phpBB 2.0.12 phpBB Group phpBB 2.0.11 phpBB Group phpBB 2.0.10 phpBB Group phpBB 2.0.9 phpBB Group phpBB 2.0.8 a phpBB Group phpBB 2.0.8 phpBB Group phpBB 2.0.7 a phpBB Group phpBB 2.0.7 phpBB Group phpBB 2.0.6 d phpBB Group phpBB 2.0.6 c phpBB Group phpBB 2.0.6 phpBB Group phpBB 2.0.5 phpBB Group phpBB 2.0.4 phpBB Group phpBB 2.0.3 phpBB Group phpBB 2.0.2 phpBB Group phpBB 2.0.1 phpBB Group phpBB 2.0 .0 phpBB Group phpBB 2.0 RC4 phpBB Group phpBB 2.0 RC3 phpBB Group phpBB 2.0 RC2 phpBB Group phpBB 2.0 RC1 phpBB Group phpBB 2.0 Beta 1 |
| Not Vulnerable: | |
Discussion
PHPBB Session.PHP Autologin User_Level Privilege Escalation Vulnerability
phpBB is reported prone to a privilege escalation vulnerability. The issue is reported to exist when an autologin fails.
A remote attacker may potentially exploit this vulnerability to gain access to parts of the affected website that should only be visible to a website administrator.
Information harvested through exploitation of this vulnerability may be employed to aid in further attacks against the affected site.
This vulnerability is reported to affect phpBB versions up to up to 2.0.13.
phpBB is reported prone to a privilege escalation vulnerability. The issue is reported to exist when an autologin fails.
A remote attacker may potentially exploit this vulnerability to gain access to parts of the affected website that should only be visible to a website administrator.
Information harvested through exploitation of this vulnerability may be employed to aid in further attacks against the affected site.
This vulnerability is reported to affect phpBB versions up to up to 2.0.13.
Exploit / POC
PHPBB Session.PHP Autologin User_Level Privilege Escalation Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
PHPBB Session.PHP Autologin User_Level Privilege Escalation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHPBB Session.PHP Autologin User_Level Privilege Escalation Vulnerability
References:
References: