• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

YaBB Administrator Command Execution Vulnerability

Bugtraq ID:	11214
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 17 2004 12:00AM
Updated:	Sep 17 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to "GulfTech Security" <security@gulftech.org>.
Vulnerable:	YaBB YaBB 9.11.2000 YaBB YaBB 9.1.2000 YaBB YaBB 1.41 YaBB YaBB 1.40 YaBB YaBB 1 Gold Release - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 YaBB YaBB 1 Gold - SP 1.3.1 YaBB YaBB 1 Gold - SP 1.3 YaBB YaBB 1 Gold - SP 1.2 YaBB YaBB 1 Gold - SP 1 - Apache Software Foundation Apache 1.3.22 - Apache Software Foundation Apache 1.3.20 - Apache Software Foundation Apache 1.3.20 - Apache Software Foundation Apache 1.3.19 - Apache Software Foundation Apache 1.3.19 - Apache Software Foundation Apache 1.3.18 - Apache Software Foundation Apache 1.3.18 - Apache Software Foundation Apache 1.3.17 - Apache Software Foundation Apache 1.3.17 - Microsoft IIS 5.0 - Microsoft IIS 4.0 - Omnicron OmniHTTPD 2.4 Pro
Not Vulnerable: