Gentoo phpBB "highlight" PHP Code Execution Vulnerability - Advisories

Gentoo phpBB "highlight" PHP Code Execution Vulnerability

Secunia Advisory:	SA15905
Release Date:	2005-07-05

Critical:	Highly critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Workaround

OS:	Gentoo Linux 1.x




Description: Gentoo has acknowledged a vulnerability in phpBB, which can be exploited by malicious people to compromise a vulnerable system. For more information: SA15845 Solution: The phpBB package is no longer supported by Gentoo. Users are advised to unmerge the vulnerable package or refer to www.phpbb.com for security updates. Original Advisory: http://www.gentoo.org/security/en/glsa/glsa-200507-03.xml Other References: SA15845: http://secunia.com/advisories/15845/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1425 Related Secunia Security Advisories, displaying 10

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Slackware update for amarok

2.	OpenOffice "rtl_allocateMe mory()" Truncation Vulnerability

3.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

4.	Caudium "configvar" Insecure Temporary Files

5.	phpMyRealty "price_max" SQL Injection Vulnerability

6.	Novell eDirectory Multiple Vulnerabilities

7.	dotProject SQL Injection and Cross-Site Scripting

8.	Sun Solaris Kernel Covert Channel Security Bypass

9.	GpsDrive "geo-code" Insecure Temporary Files

10.	Joomla Community Builder Component File Inclusion