FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-3415

This CVE name corresponds to:

Entered Topic
2006-02-16 phpbb -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2005-3415
Phase Assigned(20051101)

Description

phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but not the GPC variable.

References

Source Reference
BUGTRAQ 20051031 Advisory 17/2005: phpBB Multiple Vulnerabilities
MISC http://www.hardened-php.net/advisory_172005.75.html
DEBIAN DSA-925
BID 15243
OSVDB 20386
SECTRACK 1015121
SECUNIA 17366
SECUNIA 18098
SREASON 130
XF phpbb-multiple-variables-bypass-security(22914)