CVE-2005-0659: Medium severity Phpbb Group Phpbb vulnerability
Published Mar 7, 2005
·Updated
phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.
Affected Software
30 affected components
Phpbb Group Phpbb=2.0.5
Phpbb Group Phpbb=2.0.7a
Phpbb Group Phpbb=1.2.1
Phpbb Group Phpbb=2.0.8
Phpbb Group Phpbb=2.0.11
Phpbb Group Phpbb=1.4.1
Phpbb Group Phpbb=1.4.4
Phpbb Group Phpbb=2.0.1
Phpbb Group Phpbb=2.0.13
Phpbb Group Phpbb=2.0.3
Phpbb Group Phpbb=2.0_rc2
Phpbb Group Phpbb=1.4.2
Phpbb Group Phpbb=2.0_rc1
Phpbb Group Phpbb=2.0.4
Phpbb Group Phpbb=2.0.12
Phpbb Group Phpbb=2.0.9
Phpbb Group Phpbb=2.0.7
Phpbb Group Phpbb=2.0.8a
Phpbb Group Phpbb=2.0.6d
Phpbb Group Phpbb=2.0.2
Phpbb Group Phpbb=1.0.0
Phpbb Group Phpbb=2.0.10
Phpbb Group Phpbb=2.0.6c
Phpbb Group Phpbb=1.2.0
Phpbb Group Phpbb=1.4.0
Phpbb Group Phpbb=2.0_rc4
Phpbb Group Phpbb=2.0.6
Phpbb Group Phpbb=2.0.0
Phpbb Group Phpbb=2.0_rc3
Phpbb Group Phpbb=2.0_beta1
Event History
Mar 7, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0659?
CVE-2005-0659 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2005-0659?
To fix CVE-2005-0659, upgrade your phpBB installation to version 2.0.14 or later.
3
What systems are affected by CVE-2005-0659?
CVE-2005-0659 affects phpBB versions 2.0.13 and earlier.
4
What type of exposure does CVE-2005-0659 provide to attackers?
CVE-2005-0659 allows remote attackers to gain sensitive information through error messages.
5
Can CVE-2005-0659 lead to further attacks?
Yes, the exposure of sensitive information through CVE-2005-0659 can potentially aid attackers in executing further attacks.