Debian update for phpbb2 - Secunia Advisories - Vulnerability Intelligence

Debian update for phpbb2
Secunia Advisory:	SA28871	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2008-02-11
Popularity:	5,084 views

Critical:	Less critical
Impact:	Cross Site Scripting Manipulation of data System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 3.1 Debian GNU/Linux 4.0 Debian GNU/Linux unstable alias sid

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2006-4758 CVE-2006-6839 CVE-2006-6840 CVE-2006-6508 CVE-2006-6841 CVE-2008-0471

Description: Debian has issued an update for phpbb2. This fixes some vulnerabilities, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to conduct cross-site scripting and cross-site request forgery attacks. For more information: SA22188 SA23283 SA28630 Solution: Apply updated packages. -- Debian GNU/Linux 3.1 alias sarge -- Source archives: http://security.debian.org/pool/updat...hpbb2/phpbb2_2.0.13+1-6sarge4.diff.gz Size/MD5 checksum: 67912 c403597d08f4c5af0f62b84c5ee72a7e http://security.debian.org/pool/updat.../p/phpbb2/phpbb2_2.0.13+1.orig.tar.gz Size/MD5 checksum: 3340445 678d0cb0372e46402a472c510fb90d78 http://security.debian.org/pool/updat.../p/phpbb2/phpbb2_2.0.13+1-6sarge4.dsc Size/MD5 checksum: 1011 d5ca94a7a4c2b3468428a993a1dbc5cc Architecture independent packages: http://security.debian.org/pool/updat...bb2-conf-mysql_2.0.13-6sarge4_all.deb Size/MD5 checksum: 37766 f0df2114bd60d9b84fbda1d241294fdd http://security.debian.org/pool/updat.../phpbb2/phpbb2_2.0.13-6sarge4_all.deb Size/MD5 checksum: 526154 944e55e056fc34d970e95b78201589fe http://security.debian.org/pool/updat...pbb2-languages_2.0.13-6sarge4_all.deb Size/MD5 checksum: 2868920 f10c4962035ede6e02417b8098efeda0 -- Debian GNU/Linux 4.0 alias etch -- Source archives: http://security.debian.org/pool/updates/main/p/phpbb2/phpbb2_2.0.21-7.dsc Size/MD5 checksum: 1051 88ad3a4f2ee714cce779873b53ebd323 http://security.debian.org/pool/updates/main/p/phpbb2/phpbb2_2.0.21.orig.tar.gz Size/MD5 checksum: 3203456 30383a9bf6c5d21736e4bdf9ec7852d5 http://security.debian.org/pool/updates/main/p/phpbb2/phpbb2_2.0.21-7.diff.gz Size/MD5 checksum: 90580 896f80500e90867741c516e57fc8bfcc Architecture independent packages: http://security.debian.org/pool/updat...bb2/phpbb2-languages_2.0.21-7_all.deb Size/MD5 checksum: 2791410 afd8a0fe8138c8a5cf00a3e4ac10ac59 http://security.debian.org/pool/updates/main/p/phpbb2/phpbb2_2.0.21-7_all.deb Size/MD5 checksum: 554842 e8825ef3431bfe7ccf72f9f59f13a119 http://security.debian.org/pool/updat...b2/phpbb2-conf-mysql_2.0.21-7_all.deb Size/MD5 checksum: 53706 49baf96bcc1c273a93e8bb5169dca722 -- Debian GNU/Linux unstable alias sid -- Fixed in version 2.0.22-3. Original Advisory: http://lists.debian.org/debian-securi...-security-announce-2008/msg00048.html Other References: SA22188: http://secunia.com/advisories/22188/ SA23283: http://secunia.com/advisories/23283/ SA28630: http://secunia.com/advisories/28630/

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

21st Nov, 2008

New advisories:	12
New vulnerabilities:	46
Updated advisories:	20

Highly // 884 views

Apple iPhone / iPod touch Multiple Vulnerabilities

Moderately // 471 views

vBulletin Visitor Messages Script Insertion Vulnerability

Less // 460 views

SemanticScuttle Cross-Site Scripting Vulnerabilities

Moderately // 453 views

Easyedit CMS Multiple SQL Injection Vulnerabilities

Highly // 463 views

Fedora update for thunderbird

Less // 498 views

IBM Workplace Web Content Management Cross-Site Scripting Vulnerabilities

Highly // 725 views

BitDefender Antivirus PDF Processing Memory Corruption Vulnerability

Moderately // 522 views

xt:Commerce SQL Injection Vulnerability

Less // 475 views

Softbiz Classifieds Script "msg" Cross-Site Scripting Vulnerability

Not // 664 views

Checkpoint VPN-1 Information Disclosure Vulnerability

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.