CVE

Id
14622  
CVE No.
CVE-2005-3416  
Status
Candidate  
Description
phpBB 2.0.17 and earlier, when register_globals is enabled and the session_start function has not been called to handle a session, allows remote attackers to bypass security checks by setting the $_SESSION and $HTTP_SESSION_VARS variables to strings instead of arrays, which causes an array_merge function call to fail.  
Phase
Assigned (20051101)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
111573 14622 CVE-2005-3416 BUGTRAQ:20051031 Advisory 17/2005: phpBB Multiple Vulnerabilities  View
111574 14622 CVE-2005-3416 URL:http://marc.info/?l=bugtraq&m=113081113317600&w=2  View
111575 14622 CVE-2005-3416 MISC:http://www.hardened-php.net/advisory_172005.75.html  View
111576 14622 CVE-2005-3416 DEBIAN:DSA-925  View
111577 14622 CVE-2005-3416 URL:http://www.debian.org/security/2005/dsa-925  View
111578 14622 CVE-2005-3416 BID:15243  View
111579 14622 CVE-2005-3416 URL:http://www.securityfocus.com/bid/15243  View
111580 14622 CVE-2005-3416 OSVDB:20413  View
111581 14622 CVE-2005-3416 URL:http://www.osvdb.org/20413  View
111582 14622 CVE-2005-3416 SECTRACK:1015121  View
111583 14622 CVE-2005-3416 URL:http://securitytracker.com/id?1015121  View
111584 14622 CVE-2005-3416 SECUNIA:17366  View
111585 14622 CVE-2005-3416 URL:http://secunia.com/advisories/17366  View
111586 14622 CVE-2005-3416 SECUNIA:18098  View
111587 14622 CVE-2005-3416 URL:http://secunia.com/advisories/18098  View
111588 14622 CVE-2005-3416 SREASON:130  View

Related JVN