SimpleBBS Users.php Insecure File Permissions Vulnerability

Bugtraq ID:	7045
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 07 2003 12:00AM
Updated:	Mar 07 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to flur <[email protected]>.
Vulnerable:	SimpleMedia SimpleBBS 1.0.6
Not Vulnerable:	SimpleMedia SimpleBBS 1.0.7

SimpleBBS Users.php Insecure File Permissions Vulnerability

SimpleBBS reportedly creates sensitive files with world-readable permissions.
As a result anyone who has access to SimpleBBS web resources may access confidential information stored in the SimpleBBS user database.

This vulnerability was reported for SimpleBBS 1.0.6. It is not known if earlier versions are affected by this vulnerability.

SimpleBBS Users.php Insecure File Permissions Vulnerability

The following proof of concept was provided:

http://www.example.com/simplebbs/users/users.php

SimpleBBS Users.php Insecure File Permissions Vulnerability

Solution:
The vendor has released an updated version of SimpleBBS which addresses this vulnerability:


SimpleMedia SimpleBBS 1.0.6

• SimpleMedia SimpleBBS 1.0.7
  http://www.simplemedia.org/sbbs-107-src.zip

SimpleBBS Users.php Insecure File Permissions Vulnerability

References:

• SimpleBBS homepage (SimpleMedia)
  
• SimpleBBS 1.0.6 Default Permissions Vuln (flur )