RETIRED: phpBB .PNG and .RAR Multiple Arbitrary File Upload Vulnerabilities
BID:26740
Info
RETIRED: phpBB .PNG and .RAR Multiple Arbitrary File Upload Vulnerabilities
| Bugtraq ID: | 26740 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 06 2007 12:00AM |
| Updated: | Dec 18 2007 03:51AM |
| Credit: | Scr34M, Dr4g0n, and Bl@ckM@mba are credited with the discovery of these vulnerabilities. |
| Vulnerable: |
phpBB Group phpBB 2.0.22 |
| Not Vulnerable: | |
Discussion
RETIRED: phpBB .PNG and .RAR Multiple Arbitrary File Upload Vulnerabilities
phpBB is prone to multiple vulnerabilities that allow attackers to upload arbitrary files because it fails to properly verify the content of attachments posted to web-log entries.
Exploiting these issues may allow an attacker to upload arbitrary code and execute it in the context of the webserver process.
phpBB 2.0.22 is vulnerable; other versions may also be affected.
UPDATE (December 7, 2007): The vendor refutes these issues, indicating that files cannot be uploaded to posts.
NOTE: This BID is being retired because information from the vendor indicates that the application is not vulnerable to the issues described.
phpBB is prone to multiple vulnerabilities that allow attackers to upload arbitrary files because it fails to properly verify the content of attachments posted to web-log entries.
Exploiting these issues may allow an attacker to upload arbitrary code and execute it in the context of the webserver process.
phpBB 2.0.22 is vulnerable; other versions may also be affected.
UPDATE (December 7, 2007): The vendor refutes these issues, indicating that files cannot be uploaded to posts.
NOTE: This BID is being retired because information from the vendor indicates that the application is not vulnerable to the issues described.
Exploit / POC
RETIRED: phpBB .PNG and .RAR Multiple Arbitrary File Upload Vulnerabilities
Attackers can exploit these issues via a browser.
Attackers can exploit these issues via a browser.
Solution / Fix
RETIRED: phpBB .PNG and .RAR Multiple Arbitrary File Upload Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: phpBB .PNG and .RAR Multiple Arbitrary File Upload Vulnerabilities
References:
References:
- phpBB Home Page (phpBB)