Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-1950
phpbb
ip spoofing
x-forwarded-for
security vulnerability
cve-2004-1950
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.1%
phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.
Affected configurations
Node
phpbb_groupphpbbMatch2.0.0
ORphpbb_groupphpbbMatch2.0.1
ORphpbb_groupphpbbMatch2.0.2
ORphpbb_groupphpbbMatch2.0.3
ORphpbb_groupphpbbMatch2.0.4
ORphpbb_groupphpbbMatch2.0.5
ORphpbb_groupphpbbMatch2.0.6
ORphpbb_groupphpbbMatch2.0.6c
ORphpbb_groupphpbbMatch2.0.6d
ORphpbb_groupphpbbMatch2.0.7
ORphpbb_groupphpbbMatch2.0.7a
ORphpbb_groupphpbbMatch2.0.8
ORphpbb_groupphpbbMatch2.0.8a
Related
nvd
nvd
CVE-2004-1950
2004-04-19 04:00:00
openvas
openvas
FreeBSD Ports: phpbb
2008-09-04 00:00:00
cvelist
cvelist
CVE-2004-1950
2005-05-10 04:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.1%
Related for CVE-2004-1950