CVE-2002-1537: Critical severity Phpbb Group Phpbb vulnerability
Published Mar 31, 2003
·Updated
adminugauth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling adminugauth.php with modifed form fields such as "u".
Affected Software
1 affected component
Phpbb Group Phpbb=2.0.0
Remediation
Patch Available
Patch Available
Event History
Mar 31, 2003
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1537?
CVE-2002-1537 is considered a high severity vulnerability due to its potential for local users to gain unauthorized administrator privileges.
2
How do I fix CVE-2002-1537?
To mitigate CVE-2002-1537, upgrade phpBB to a version later than 2.0.0 that addresses this vulnerability.
3
Who is affected by CVE-2002-1537?
Users of phpBB version 2.0.0 are affected by CVE-2002-1537 as it allows local users to exploit the system.
4
What components are involved in CVE-2002-1537?
CVE-2002-1537 involves the admin_ug_auth.php script in phpBB 2.0.0 which can be exploited by manipulated form fields.
5
Can CVE-2002-1537 be exploited remotely?
CVE-2002-1537 is not a remote exploit; it requires local access to the system to gain administrative privileges.