Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 491
Alerts This Week
Warning Icon 1 491

Gentoo GLSA-200411-32 High Severity: phpBB Remote Command Execution

gentoo
Calendar Grey November 24, 2004
Scroller Gentoo
Critical Gentoo GLSA highlights essential security patches for phpBB, addressing serious remote command injection risks, and outlines the measures needed for safeguarding systems.
phpBB contains a vulnerability which allows a remote attacker to execute arbitrary commands with the rights of the web server user.

Summary

Gentoo Linux Security Advisory GLSA 200411-32 https://security.gentoo.org/ Severity: High Title: phpBB: Remote command execution Date: November 24, 2004 Bugs: #71681 ID: 200411-32

Synopsis ======= phpBB contains a vulnerability which allows a remote attacker to execute arbitrary commands with the rights of the web server user.
Background ========= phpBB is an Open Source bulletin board package.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/phpbb < 2.0.10 >= 2.0.11
========== phpBB contains a vulnerability in the highlighting code and several vulnerabilities in the username handling code.
Impact ===== An attacker can exploit the highligh...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory high severity gentoo exploit patch remote command execution phpbb

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo exploit patch remote command execution phpbb

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround