CVE-2005-0603: Medium severity Phpbb Group Phpbb vulnerability
Published Feb 28, 2005
·Updated
viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message.
Affected Software
21 affected components
Phpbb Group Phpbb=2.0.0
Phpbb Group Phpbb=2.0.1
Phpbb Group Phpbb=2.0.2
Phpbb Group Phpbb=2.0.3
Phpbb Group Phpbb=2.0.4
Phpbb Group Phpbb=2.0.5
Phpbb Group Phpbb=2.0.6
Phpbb Group Phpbb=2.0.6c
Phpbb Group Phpbb=2.0.6d
Phpbb Group Phpbb=2.0.7
Phpbb Group Phpbb=2.0.7a
Phpbb Group Phpbb=2.0.8
Phpbb Group Phpbb=2.0.8a
Phpbb Group Phpbb=2.0.9
Phpbb Group Phpbb=2.0.10
Phpbb Group Phpbb=2.0.11
Phpbb Group Phpbb=2.0_beta1
Phpbb Group Phpbb=2.0_rc1
Phpbb Group Phpbb=2.0_rc2
Phpbb Group Phpbb=2.0_rc3
Phpbb Group Phpbb=2.0_rc4
Remediation
Patch Available
Patch Available
Event History
Feb 28, 2005
CVE Published
via NVD·05:00 AM
Mar 1, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0603?
CVE-2005-0603 is classified as a medium severity vulnerability.
2
How do I fix CVE-2005-0603?
To fix CVE-2005-0603, upgrade phpBB to version 2.0.13 or later.
3
What versions of phpBB are affected by CVE-2005-0603?
CVE-2005-0603 affects all versions of phpBB 2.0.12 and earlier.
4
What kind of information leak is associated with CVE-2005-0603?
CVE-2005-0603 allows remote attackers to reveal sensitive information through PHP error messages.
5
What component of phpBB is vulnerable in CVE-2005-0603?
CVE-2005-0603 affects the viewtopic.php script in phpBB.