CVE-2007-3295: Medium severity Yabb Yabb vulnerability
Directory traversal vulnerability in Yet another Bulletin Board (YaBB) 2.1 and earlier allows remote authenticated users to execute arbitrary Perl code via a .. (dot dot) in the userlanguage profile setting, which sets the userlanguage key of the member hash, and is propagated to the language variable in (1) HelpCentre.pl and (2) ICQPager.pl, (3) the uselang variable in Subs.pl, and the actlang variable in (4) Post.pl and (5) InstantMessage.pl; as demonstrated by pointing userlanguage to the English folder, modifying English/HelpCentre.lng file to contain Perl statements, and then invoking the help action in YaBB.pl.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3295?
CVE-2007-3295 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2007-3295?
To fix CVE-2007-3295, upgrade your YaBB software to version 2.2 or later as it contains patches for this vulnerability.
Who is affected by CVE-2007-3295?
CVE-2007-3295 affects users of YaBB versions 2.1 and earlier, including 2.0_rc1 and 2.0_rc2.
What type of attack does CVE-2007-3295 allow?
CVE-2007-3295 allows remote authenticated users to execute arbitrary Perl code on the server.
When was CVE-2007-3295 discovered?
CVE-2007-3295 was disclosed in June 2007.