[24774] in bugtraq
RE: phpBB2 remote execution command
daemon@ATHENA.MIT.EDU (Nathan Anderson)
Thu Mar 21 02:46:21 2002
From: "Nathan Anderson" <nathan@andersonsplace.net>
To: "'nullbyte'" <nullbyte@inetd-secure.net>, <bugtraq@securityfocus.com>
Cc: <vuln-dev@securityfocus.com>
Date: Tue, 19 Mar 2002 13:32:22 -0800
Message-ID: <002701c1cf8d$8ea3ea90$8f00a8c0@mt8100>
MIME-Version: 1.0
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: 7bit
In-Reply-To: <Pine.BSF.4.44.0203181645580.19291-101000@inetd-secure.net>
>>All *nix running phpBB2 versoion 2.0.<<
Actually it is RC3 and prior. There is a patch for this and the latest
CVS and RC4 do not have this problem.
Nathan.
