CVE-2002-2349: Infoleak
Published Dec 31, 2002
·Updated
phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information.
Affected Software
1 affected component
phpBB phpBBmod=1.3.3
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityWeaknessAffected Software
Oct 29, 2007
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2349?
CVE-2002-2349 is considered to have a moderate severity due to the potential exposure of sensitive environment information.
2
How do I fix CVE-2002-2349?
Fix CVE-2002-2349 by removing or restricting access to the phpinfo.php script in phpBBmod 1.3.3.
3
What software versions are affected by CVE-2002-2349?
CVE-2002-2349 specifically affects phpBBmod version 1.3.3.
4
Can CVE-2002-2349 be exploited remotely?
Yes, CVE-2002-2349 can be exploited remotely by attackers to obtain sensitive information.
5
What types of information can be exposed by CVE-2002-2349?
CVE-2002-2349 may expose configuration and environment details that could aid an attacker in further exploits.