CVE-2003-1373: Path Traversal
Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. (dot dot) sequences followed by NULL (%00) characters in CGI parameters, as demonstrated using the lang parameter in prefs.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1373?
CVE-2003-1373 is classified as a high severity vulnerability due to its potential for remote attackers to read and include arbitrary files.
How do I fix CVE-2003-1373?
To fix CVE-2003-1373, you should upgrade PhpBB to a version beyond 1.4.4 that addresses this directory traversal vulnerability.
Which versions of PhpBB are affected by CVE-2003-1373?
CVE-2003-1373 affects PhpBB versions 1.4.0 through 1.4.4.
What does the directory traversal vulnerability in CVE-2003-1373 allow?
The directory traversal vulnerability in CVE-2003-1373 allows remote attackers to access sensitive files on the server.
Is CVE-2003-1373 a critical vulnerability for web applications?
Yes, CVE-2003-1373 is considered critical for web applications as it can lead to unauthorized file access and potential data breaches.