medium5.0
CVE-2005-4687
PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, w…
Impact
PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F-Art Agency | Blog Cms | Versions 3.0, 3.1, 3.1.2, 3.1.3, 3.1.4, 3.6.2 |
| Punbb | Punbb | Versions 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17425
- http://secunia.com/advisories/17433
- http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt
- http://www.securityfocus.com/bid/15326
- http://secunia.com/advisories/17425
- http://secunia.com/advisories/17433
- http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt
- http://www.securityfocus.com/bid/15326