CVE-2005-3417: High severity Phpbb Group Phpbb vulnerability
Published Nov 1, 2005
·Updated
phpBB 2.0.17 and earlier, when the registerlongarrays directive is disabled, allows remote attackers to modify global variables and bypass security mechanisms because PHP does not define the associated HTTP variables.
Affected Software
27 affected components
Phpbb Group Phpbb=2.0.5
Phpbb Group Phpbb=2.0.7a
Phpbb Group Phpbb=2.0.8
Phpbb Group Phpbb=2.0.11
Phpbb Group Phpbb=2.0.1
Phpbb Group Phpbb=2.0.13
Phpbb Group Phpbb=2.0.16
Phpbb Group Phpbb=2.0.3
Phpbb Group Phpbb=2.0_rc2
Phpbb Group Phpbb=2.0_rc1
Phpbb Group Phpbb=2.0.4
Phpbb Group Phpbb=2.0.12
Phpbb Group Phpbb=2.0.9
Phpbb Group Phpbb=2.0.7
Phpbb Group Phpbb=2.0.8a
Phpbb Group Phpbb=2.0.6d
Phpbb Group Phpbb=2.0.2
Phpbb Group Phpbb=2.0.14
Phpbb Group Phpbb=2.0.10
Phpbb Group Phpbb=2.0.6c
Phpbb Group Phpbb=2.0.15
Phpbb Group Phpbb=2.0_rc4
Phpbb Group Phpbb=2.0.6
Phpbb Group Phpbb=2.0.0
Phpbb Group Phpbb=2.0.17
Phpbb Group Phpbb=2.0_rc3
Phpbb Group Phpbb=2.0_beta1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Nov 1, 2005
CVE Published
09:02 PM
Nov 2, 2005
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3417?
CVE-2005-3417 is considered a moderate severity vulnerability that allows remote attackers to modify global variables.
2
How do I fix CVE-2005-3417?
To fix CVE-2005-3417, enable the register_long_arrays directive in your PHP configuration.
3
Which versions of phpBB are affected by CVE-2005-3417?
CVE-2005-3417 affects phpBB versions 2.0.17 and earlier.
4
What kind of attacks can be performed using CVE-2005-3417?
Attackers can exploit CVE-2005-3417 to modify global variables and bypass application security mechanisms.
5
What is the common mitigation for CVE-2005-3417?
A common mitigation for CVE-2005-3417 is to upgrade phpBB to a version later than 2.0.17.