phpBB viewtopic.php script SQL injection

phpbb-viewtopic-sql-injection (12366)

Medium Risk

Description:

phpBB is vulnerable to SQL injection. By sending specially-crafted SQL statements to the viewtopic.php script using the topic_id variable, a remote attacker could obtain the MD5 password hash for any user. An attacker could use this vulnerability to gain unauthorized access to the account.

Consequences:

Gain Access

Remedy:

For Gentoo Linux:
Upgrade to the latest version of phpbb (2.0.5 or later), as listed in Gentoo Linux Security Announcement 200306-15. See References.

References:

• BugTraq Mailing List, Thu Jun 19 2003 - 02:27:37 CDT: phpBB password disclosure by sql injection.
• Gentoo Linux Security Announcement 200306-15: phpbb. (From LinuxSecurity archive)
• The phpBB Group Web site: phpBB.
• BID-7979: phpBB Viewtopic.PHP SQL Injection Vulnerability
• CVE-2003-0486: SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.

Platforms Affected:

• Gentoo Linux
• phpBB phpBB
• SGI IRIX 6.5
• SGI IRIX 6.5 20
• SGI IRIX 6.5.1
• SGI IRIX 6.5.10
• SGI IRIX 6.5.10f
• SGI IRIX 6.5.10m
• SGI IRIX 6.5.11
• SGI IRIX 6.5.11f
• SGI IRIX 6.5.11m
• SGI IRIX 6.5.12
• SGI IRIX 6.5.12f
• SGI IRIX 6.5.12m
• SGI IRIX 6.5.13
• SGI IRIX 6.5.13f
• SGI IRIX 6.5.13m
• SGI IRIX 6.5.14
• SGI IRIX 6.5.14f
• SGI IRIX 6.5.14m
• SGI IRIX 6.5.15
• SGI IRIX 6.5.15f
• SGI IRIX 6.5.15m
• SGI IRIX 6.5.16
• SGI IRIX 6.5.16f
• SGI IRIX 6.5.16m
• SGI IRIX 6.5.17
• SGI IRIX 6.5.17f
• SGI IRIX 6.5.17m
• SGI IRIX 6.5.18
• SGI IRIX 6.5.18f
• SGI IRIX 6.5.18m
• SGI IRIX 6.5.19
• SGI IRIX 6.5.19f
• SGI IRIX 6.5.19m
• SGI IRIX 6.5.2
• SGI IRIX 6.5.20
• SGI IRIX 6.5.2f
• SGI IRIX 6.5.2m
• SGI IRIX 6.5.3
• SGI IRIX 6.5.3f
• SGI IRIX 6.5.3m
• SGI IRIX 6.5.4
• SGI IRIX 6.5.4f
• SGI IRIX 6.5.4m
• SGI IRIX 6.5.5
• SGI IRIX 6.5.5f
• SGI IRIX 6.5.5m
• SGI IRIX 6.5.6
• SGI IRIX 6.5.6f
• SGI IRIX 6.5.6m
• SGI IRIX 6.5.7
• SGI IRIX 6.5.7f
• SGI IRIX 6.5.7m
• SGI IRIX 6.5.8
• SGI IRIX 6.5.8f
• SGI IRIX 6.5.8m
• SGI IRIX 6.5.9
• SGI IRIX 6.5.9f
• SGI IRIX 6.5.9m

Reported:

Jun 19, 2003

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

For corrections or additions please email xforce@iss.net

Return to the main page