Debian DSA-1488-1 : phpbb2 - several vulnerabilities

critical Nessus Plugin ID 30227

Synopsis

The remote Debian host is missing a security-related update.

Description

Several remote vulnerabilities have been discovered in phpBB, a web-based bulletin board. The Common Vulnerabilities and Exposures project identifies the following problems :

- CVE-2008-0471 Private messaging allowed cross site request forgery, making it possible to delete all private messages of a user by sending them to a crafted web page.

- CVE-2006-6841 / CVE-2006-6508 Cross site request forgery enabled an attacker to perform various actions on behalf of a logged in user.
(Applies to sarge only.)

- CVE-2006-6840 A negative start parameter could allow an attacker to create invalid output. (Applies to sarge only.)

- CVE-2006-6839 Redirection targets were not fully checked, leaving room for unauthorised external redirections via a phpBB forum. (Applies to sarge only.)

- CVE-2006-4758 An authenticated forum administrator may upload files of any type by using specially crafted filenames. (Applies to sarge only.)

Solution

Upgrade the phpbb2 package.

For the old stable distribution (sarge), these problems have been fixed in version 2.0.13+1-6sarge4.

For the stable distribution (etch), these problems have been fixed in version 2.0.21-7.

Plugin Details

Severity: Critical

ID: 30227

File Name: debian_DSA-1488.nasl

Version: 1.20

Type: local

Agent: unix

Family: Debian Local Security Checks

Published: 2/11/2008

Updated: 1/4/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.1

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:debian:debian_linux:3.1, cpe:/o:debian:debian_linux:4.0, p-cpe:/a:debian:debian_linux:phpbb2

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Patch Publication Date: 2/9/2008

Reference Information

CVE: CVE-2006-4758, CVE-2006-6508, CVE-2006-6839, CVE-2006-6840, CVE-2006-6841, CVE-2008-0471

CWE: 352

DSA: 1488

Detections

Analytics