CVE-2005-4687

PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:f-art_agency:blog_cms:3.0:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.1:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.6.2:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.6.4:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0a:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0b:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0c:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0d:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*

History

21 Nov 2024, 00:04

Type Values Removed Values Added
References () http://secunia.com/advisories/17425 - Patch, Vendor Advisory () http://secunia.com/advisories/17425 - Patch, Vendor Advisory
References () http://secunia.com/advisories/17433 - Patch, Vendor Advisory () http://secunia.com/advisories/17433 - Patch, Vendor Advisory
References () http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt - () http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt -
References () http://www.securityfocus.com/bid/15326 - Patch () http://www.securityfocus.com/bid/15326 - Patch

Information

Published : 2005-12-31 05:00

Updated : 2024-11-21 00:04


NVD link : CVE-2005-4687

Mitre link : CVE-2005-4687

CVE.ORG link : CVE-2005-4687


JSON object : View

Products Affected

punbb

  • punbb

f-art_agency

  • blog_cms