CVE Vulnerabilities

CVE-2006-3796

Published: Jul 24, 2006 | Modified: Oct 17, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character, which allows remote authenticated users to login as the space user, post as the guest user, and block the ability of an administrator to ban the space user.

Affected Software

Name Vendor Start Version End Version
Deluxebb Deluxebb * 1.07 (including)

References