<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<span class="postbody">Altra falla dal sito di phpbb... se qualcuno di
voi lo usa...<br>
<br>
Hi everyone,
<br>
<br>
phpBB Group announces the release of phpBB 2.0.13, the "Beware of the
furries" edition. This release addresses two recent security exploits,
one of them critical. They were reported a few days after .12 was
released and no one is more annoyed than us, having to release a new
version in such a short period of time.
<br>
Fortunately both fixes are easy and in each case just one line needs to
be edited.
<br>
<br>
The first issue is critical (session handling allowing everyone
gaining administrator rights) and we urge you to fix it on your forums
as soon as possible:
<br>
<br>
Open includes/sessions.php
<br>
<br>
Find:
<br>
</span>
<table align="center" border="0" cellpadding="3" cellspacing="1"
width="90%">
<tbody>
<tr>
<td><span class="genmed"><b>Code:</b></span></td>
</tr>
<tr>
<td class="code">if( $sessiondata['autologinid'] ==
$auto_login_key )</td>
</tr>
</tbody>
</table>
<span class="postbody"><br>
Replace with:
<br>
</span>
<table align="center" border="0" cellpadding="3" cellspacing="1"
width="90%">
<tbody>
<tr>
<td><span class="genmed"><b>Code:</b></span></td>
</tr>
<tr>
<td class="code">if( $sessiondata['autologinid'] ===
$auto_login_key )</td>
</tr>
</tbody>
</table>
<span class="postbody"><br>
<br>
<br>
A second minor issue reported to bugtraq several days ago was the
path disclosure bug in viewtopic.php which got fixed by applying the
following steps:
<br>
<br>
Open viewtopic.php
<br>
<br>
Find:
<br>
</span>
<table align="center" border="0" cellpadding="3" cellspacing="1"
width="90%">
<tbody>
<tr>
<td><span class="genmed"><b>Code:</b></span></td>
</tr>
<tr>
<td class="code">$message
= str_replace('\"', '"',
substr(preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se',
"preg_replace('#\b(" . $highlight_match . ")\b#i', '<span
style=\"color:#" . $theme['fontcolor3'] .
"\"><b>\\\\1</b></span>', '\\0')", '>' .
$message . '<'), 1, -1));</td>
</tr>
</tbody>
</table>
<span class="postbody"><br>
Replace with:
<br>
</span>
<table align="center" border="0" cellpadding="3" cellspacing="1"
width="90%">
<tbody>
<tr>
<td><span class="genmed"><b>Code:</b></span></td>
</tr>
<tr>
<td class="code">$message
= str_replace('\"', '"',
substr(@preg_replace('#(\>(((?>([^><]+|(?R)))*)\<))#se',
"@preg_replace('#\b(" . $highlight_match . ")\b#i', '<span
style=\"color:#" . $theme['fontcolor3'] .
"\"><b>\\\\1</b></span>', '\\0')", '>' .
$message . '<'), 1, -1));
<br>
</td>
</tr>
</tbody>
</table>
<span class="postbody"><br>
<br>
As with all new releases we urge you to upgrade as soon as possible.
You can of course find this download available on our <a
href="http://www.phpbb.com/downloads.php" target="_blank"
class="postlink">downloads page</a>. As per usual three packages are
available to simplify your upgrade.</span><br>
<br>
Fabio Comuni wrote:
<blockquote cite="mid422370CA.3050604@lombardiacom.it" type="cite">mah..
la prima volta c'era ancora su il vecchio sito...
<br>
non sarà un buco di phpbb? ;)
<br>
<br>
Incubus wrote:
<br>
<blockquote type="cite">On Mon, 2005-02-28 at 12:31 +0100,
<a class="moz-txt-link-abbreviated" href="mailto:fabrix.xm@lombardiacom.it">fabrix.xm@lombardiacom.it</a> wrote:
<br>
<br>
<blockquote type="cite">Non solo è stata sostitua la index,
<br>
ma è anche stato cancellato l'intero contenuto della cartella 'ewiki'
dove
<br>
c'era
<br>
effetivamente il sito (tra l'altro sono riusciti a cancellare file che
io
<br>
tramite ftp non riuscivo mai a cancellare, per via del nome che
cominciava per
<br>
<a class="moz-txt-link-rfc2396E" href="http://">"http://"</a>).
<br>
Io pianto qui. rangives. Il forum inspiegabilmente continua a
funzionare.
<br>
<br>
</blockquote>
Ma nn sarà qualche buco di ewiki? La butto li... :-P
<br>
<br>
KNOWLEDGE IS POWER
<br>
<a class="moz-txt-link-freetext" href="http://incubus.homelinux.net">http://incubus.homelinux.net</a>
<br>
<a class="moz-txt-link-freetext" href="http://www.gl-como.net">http://www.gl-como.net</a>
<br>
<br>
<br>
------------------------------------------------------------------------
<br>
<br>
<br>
</blockquote>
<br>
<pre wrap="">
<hr size="4" width="90%">
</pre>
</blockquote>
<br>
</body>
</html>