CVE-2005-3415

Publication date 1 November 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE (GPC) variable and a GLOBALS[] variable with the same name, which causes phpBB to unset the GLOBALS[] variable but not the GPC variable.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
phpbb2 7.04 feisty
Fixed 2.0.18-2
6.10 edgy
Fixed 2.0.18-2
6.06 LTS dapper
Fixed 2.0.18-2