HTTP: Phorum admin.php3 Unverified Administrative Password Change
This signature detects attempts to exploit the vulnerable admin.php3 script in Phorum. Attackers can remotely send a maliciously crafted string to the script, change the administrative board password without user verification, and access restricted files on the local system.
Extended Description
Phorum is a popular, free, open source software package originally written by Brian Moon. The package is designed to add chat/bulletin board style interaction between visitors of a web site. A problem with Phorum can allow remote users access to restricted files on the local system. This is due to the handling of passwords by the program. By sending a custom crafted string to the admin.php3 script, it's possible to change the administrative password of the board without verification of the users credentials. The "default .langname name" field in the Master settings can then be changed to any file of the users liking, which upon reload, will be output as the page. This problem makes it possible for a user with malicious motives to take control of the message board, read any file on the system, and potentially gain remote access.
Affected Products
Brian_moon phorum
Short Name
HTTP:PHP:PHORUM:ADMIN-PW-CHG
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Administrative CVE-2000-1229 Change Password Phorum Unverified admin.php3 bid:2271
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Brian_moon
CVSS Score
5.0