oss-security - CVE request: phpbb before 3.0.5

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sat, 16 Jan 2010 19:29:16 +0100
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Subject: CVE request: phpbb before 3.0.5

See:
http://www.phpbb.com/community/viewtopic.php?f=14&p=9764445
"This release fixes numerous bugs since the 3.0.4 release, corrects style 
issues, fixing one very minor security bug as well as increasing performance 
and scalability again."
# [Sec] Only use forum id supplied for posting if global announcement 
detected. (Reported by nickvergessen)

Also please note that the last time I requested CVEs for phpbb, they never got 
assigned:
http://seclists.org/oss-sec/2009/q1/104

cu,

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno@...eck.de

http://schokokeks.org - professional webhosting

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.