A vulnerability was found in Phorum 3.0.7 (Forum Software). It has been classified as critical. This affects an unknown part of the file auth.php3. The manipulation of the argument PHP_AUTH_USER with the input value boogieman leads to a backdoor vulnerability. CWE is classifying the issue as CWE-912. The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators. This is going to have an impact on confidentiality. The summary by CVE is:

Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".

The weakness was published 12/31/2000 (Website). It is possible to read the advisory at digitalsec.net. This vulnerability is uniquely identified as CVE-2000-1230 since 07/14/2005. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known. The attack technique deployed by this issue is T1588.001 according to MITRE ATT&CK.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product. Attack attempts may be identified with Snort ID 1137.

The vulnerability is also documented in the databases at Exploit-DB (20588) and SecurityFocus (BID 2274†). Similar entries are available at VDB-16219, VDB-16218, VDB-16217 and VDB-16216.

Productinfo

Type

• Forum Software

Name

• Phorum

Version

• 3.0.7

License

• open-source

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion