CVE-2002-0533 phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags.
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
phpBB 1.4.4 and earlier with BBcode allows remote attackers to cause a denial of service (CPU consumption) and corrupt the database via null \0 characters within [code] tags.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpbb group phpbb | = 1.0.0 | No fix listed |
| phpbb group phpbb | = 1.2.0 | No fix listed |
| phpbb group phpbb | = 1.2.1 | No fix listed |
| phpbb group phpbb | = 1.4.0 | No fix listed |
| phpbb group phpbb | = 1.4.1 | No fix listed |
| phpbb group phpbb | = 1.4.2 | No fix listed |
| phpbb group phpbb | = 1.4.4 | No fix listed |
References
- 20020404 [VulnWatch] (WSS-Advisories-02003) PHPBB BBcode Process Vulnerability mailing-list
- 20020404 (WSS-Advisories-02003) PHPBB BBcode Process Vulnerability mailing-list
- 20020404 (WSS-Advisories-02003) PHPBB BBcode Process Vulnerability mailing-list vendor-advisory
- phpbb-bbcode-function-dos(8764) patch vdb-entry vendor-advisory
- 4432 patch vdb-entry vendor-advisory
- 4434 vdb-entry