styles_admin potential vulnerability

Administrator Anmeldungsdatum: 02.08.2002 Beiträge: 4735 Wohnort: Aachen

There is a potential vulnerability in admin/admin_styles.php ... while it cannot (directly) lead to damage to your board it may allow people to access other files on the operating system. Therefore you are advised to modify the file as follows:

Find:

Code:

//
// Load default header
//
//
// Check if the user has cancled a confirmation message.
//
$phpbb_root_path = "./../";

$confirm = ( isset($HTTP_POST_VARS['confirm']) ) ? TRUE : FALSE;
$cancel = ( isset($HTTP_POST_VARS['cancel']) ) ? TRUE : FALSE;

if (empty($HTTP_POST_VARS['send_file']))
{
$no_page_header = ( $cancel ) ? TRUE : FALSE;
require($phpbb_root_path . 'extension.inc');
require('./pagestart.' . $phpEx);
}

if ($cancel)
{
redirect('admin/' . append_sid("admin_styles.$phpEx", true));
}

Replace with:

Code:

//
// Load default header
//
//
// Check if the user has cancled a confirmation message.
//
$phpbb_root_path = "./../";
require($phpbb_root_path . 'extension.inc');

$confirm = ( isset($HTTP_POST_VARS['confirm']) ) ? TRUE : FALSE;
$cancel = ( isset($HTTP_POST_VARS['cancel']) ) ? TRUE : FALSE;

$no_page_header = (!empty($HTTP_POST_VARS['send_file']) || $cancel) ? TRUE : FALSE;

require('./pagestart.' . $phpEx);

if ($cancel)
{
redirect('admin/' . append_sid("admin_styles.$phpEx", true));
}

phpBB2.de User Anmeldungsdatum: 24.06.2003 Beiträge: 4

So is this for your phpBB 1.1 Plus ? or for phpBB 2.0.4/2.0.5 ? Cool

Administrator Anmeldungsdatum: 02.08.2002 Beiträge: 4735 Wohnort: Aachen

phpBB 1.1 Plus = phpBB 2.0.4

This patch is definitively for 2.0.5, i dont know if the same issue is always in 2.0.4 but i think so. But you should always use the latest version.

Bye
Stefan

phpBB2.de User Anmeldungsdatum: 04.03.2003 Beiträge: 68 Wohnort: Bremen

By phpbb.com

Zitat:

Two vulnerabilities in 2.0.x by psoTFX
26 Jun 2003
Two vulnerabilities have been brought to our attention in phpBB 2.0.x (all versions). Please see the Announcement forum for details and appropriate changes.

phpBB2.de User Anmeldungsdatum: 24.06.2003 Beiträge: 4

BremerJunge hat folgendes geschrieben:

By phpbb.com

Zitat:

Two vulnerabilities in 2.0.x by psoTFX
26 Jun 2003
Two vulnerabilities have been brought to our attention in phpBB 2.0.x (all versions). Please see the Announcement forum for details and appropriate changes.

Thanks for clearing it up "BremerJunge ". Cool

phpBB2.de User Anmeldungsdatum: 21.06.2003 Beiträge: 59

Scheisse, das war echt ärgerlich, ich wurde angegriffen !