PunBB/BLOG:CMS Origin Spoofing Vulnerability

Bugtraq ID:	15326
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 04 2005 12:00AM
Updated:	Nov 04 2005 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	PunBB PunBB 1.2.9 PunBB PunBB 1.2.8 PunBB PunBB 1.2.7 PunBB PunBB 1.2.6 PunBB PunBB 1.2.5 PunBB PunBB 1.2.4 PunBB PunBB 1.2.3 PunBB PunBB 1.2.2 PunBB PunBB 1.2.1 BLOG:CMS BLOG:CMS 4.0 .0d BLOG:CMS BLOG:CMS 4.0 .0c BLOG:CMS BLOG:CMS 4.0 .0b BLOG:CMS BLOG:CMS 4.0 .0a BLOG:CMS BLOG:CMS 4.0 .0 BLOG:CMS BLOG:CMS 3.6.4 BLOG:CMS BLOG:CMS 3.6.2 BLOG:CMS BLOG:CMS 3.1.4 BLOG:CMS BLOG:CMS 3.1.3 BLOG:CMS BLOG:CMS 3.1.2 BLOG:CMS BLOG:CMS 3.1 BLOG:CMS BLOG:CMS 3.0
Not Vulnerable:	PunBB PunBB 1.2.10 BLOG:CMS BLOG:CMS 4.0 .0e

PunBB/BLOG:CMS Origin Spoofing Vulnerability

PunBB and Blog:CMS allow attackers to hide addresses using the X_FORWARDED_FOR field in the HTTP header.

These applications accept the values supplied by users in HTTP headers as the originating IP address of a request. It is possible for a remote host to supply a fake IP address in the environment variable that would obscure the origin on the request.

PunBB/BLOG:CMS Origin Spoofing Vulnerability

No exploit is required.

PunBB/BLOG:CMS Origin Spoofing Vulnerability

Solution:
PunBB has addressed this issue in PunBB version 1.2.10.

BLOG:CMS has addressed this issue is BLOG:CMS version 4.0.0e.


PunBB PunBB 1.2.1

• PunBB punbb-1.2.10.tar.gz
  http://www.punbb.org/download/punbb-1.2.10.tar.gz

PunBB PunBB 1.2.2

• PunBB punbb-1.2.10.tar.gz
  http://www.punbb.org/download/punbb-1.2.10.tar.gz

PunBB PunBB 1.2.3

• PunBB punbb-1.2.10.tar.gz
  http://www.punbb.org/download/punbb-1.2.10.tar.gz

PunBB PunBB 1.2.4

• PunBB punbb-1.2.10.tar.gz
  http://www.punbb.org/download/punbb-1.2.10.tar.gz

PunBB PunBB 1.2.5

• PunBB punbb-1.2.10.tar.gz
  http://www.punbb.org/download/punbb-1.2.10.tar.gz

PunBB PunBB 1.2.6

• PunBB punbb-1.2.10.tar.gz
  http://www.punbb.org/download/punbb-1.2.10.tar.gz

PunBB PunBB 1.2.7

• PunBB punbb-1.2.10.tar.gz
  http://www.punbb.org/download/punbb-1.2.10.tar.gz

PunBB PunBB 1.2.8

• PunBB punbb-1.2.10.tar.gz
  http://www.punbb.org/download/punbb-1.2.10.tar.gz

PunBB PunBB 1.2.9

• PunBB punbb-1.2.10.tar.gz
  http://www.punbb.org/download/punbb-1.2.10.tar.gz

BLOG:CMS BLOG:CMS 3.0

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 3.1

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 3.1.2

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 3.1.3

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 3.1.4

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 3.6.2

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 3.6.4

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 4.0 .0

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 4.0 .0c

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 4.0 .0d

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 4.0 .0b

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

BLOG:CMS BLOG:CMS 4.0 .0a

• BLOG:CMS blogcms.4.0.0e.tgz
  http://prdownloads.sourceforge.net/blogcms/blogcms.4.0.0e.tgz

PunBB/BLOG:CMS Origin Spoofing Vulnerability

References:

• BLOG:CMS Homepage (BLOG:CMS)
  
• Changelog 1.2.9 to 1.2.10 (PunBB)
  
• PunBB Homepage (PunBB)