CVE-2004-0344: Medium severity Yabb Yabb vulnerability
Published Mar 18, 2004
·Updated
Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. (dot dot) in the attachOld parameter.
Affected Software
2 affected components
Yabb Yabb=1.5.5
Yabb Yabb=1.5.5b
Remediation
Patch Available
Event History
Mar 18, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0344?
CVE-2004-0344 is considered a high severity vulnerability due to its potential for arbitrary file deletion.
2
How do I fix CVE-2004-0344?
To fix CVE-2004-0344, upgrade to YaBB SE version 1.5.6 or later where the vulnerability has been addressed.
3
What software is affected by CVE-2004-0344?
CVE-2004-0344 affects YaBB SE versions 1.5.4 through 1.5.5b.
4
What type of vulnerability is CVE-2004-0344?
CVE-2004-0344 is a directory traversal vulnerability.
5
Can CVE-2004-0344 be exploited remotely?
Yes, CVE-2004-0344 can be exploited remotely by attackers to delete files.