BID:15246

PHPBB Multiple Unspecified Vulnerabilities

Info

PHPBB Multiple Unspecified Vulnerabilities

Bugtraq ID:	15246
Class:	Unknown
CVE:
Remote:	Yes
Local:	Unknown
Published:	Oct 31 2005 12:00AM
Updated:	Oct 31 2005 12:00AM
Credit:	The vendor reported these issues. Some issues were discovered by AnthraX101 and depablo84.
Vulnerable:	phpBB Group phpBB 2.0.17 phpBB Group phpBB 2.0.16 phpBB Group phpBB 2.0.15 phpBB Group phpBB 2.0.14 phpBB Group phpBB 2.0.13 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 phpBB Group phpBB 2.0.12 phpBB Group phpBB 2.0.11 phpBB Group phpBB 2.0.10 phpBB Group phpBB 2.0.9 phpBB Group phpBB 2.0.8 a phpBB Group phpBB 2.0.8 phpBB Group phpBB 2.0.7 a phpBB Group phpBB 2.0.7 phpBB Group phpBB 2.0.6 d phpBB Group phpBB 2.0.6 c phpBB Group phpBB 2.0.6 phpBB Group phpBB 2.0.5 phpBB Group phpBB 2.0.4 phpBB Group phpBB 2.0.3 phpBB Group phpBB 2.0.2 phpBB Group phpBB 2.0.1 phpBB Group phpBB 2.0 .0 phpBB Group phpBB 2.0 RC4 - Apache Software Foundation Apache 1.3.9 - Apache Software Foundation Apache 1.3.9 phpBB Group phpBB 2.0 RC3 - Apache Software Foundation Apache 1.3.9 - Apache Software Foundation Apache 1.3.9 phpBB Group phpBB 2.0 RC2 - Apache Software Foundation Apache 1.3.9 - Apache Software Foundation Apache 1.3.9 phpBB Group phpBB 2.0 RC1 - Apache Software Foundation Apache 1.3.9 - Apache Software Foundation Apache 1.3.9 phpBB Group phpBB 2.0 Beta 1 - Apache Software Foundation Apache 1.3.9 - Apache Software Foundation Apache 1.3.9

Not Vulnerable:	phpBB Group phpBB 2.0.18

Discussion

PHPBB Multiple Unspecified Vulnerabilities

phpBB is prone to multiple unspecified vulnerabilities. Some of these issues result from insufficient sanitization of user-supplied data, however, the causes and impacts of other issues were not specified.

phpBB 2.0.17 and prior versions are affected by these issues.

Due to a lack of information, further details cannot be provided at the moment. It is possible that some of these issues were reported prior to the release of this record. This BID will be updated when more information becomes available.

Exploit / POC

PHPBB Multiple Unspecified Vulnerabilities

It is conjectured that exploit code is not required to leverage these issues.

Solution / Fix

PHPBB Multiple Unspecified Vulnerabilities

Solution:
phpBB 2.0.18 is available to address these issues.

Debian has released advisory DSA 925-1 to address various issues in phpBB. Please see the referenced advisory for more information.

phpBB Group phpBB 2.0 RC1