CVE-2013-5724

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2013-09-12

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Phpbb3 (Debian)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=711172
• http://secunia.com/advisories/54665
• http://www.debian.org/security/2013/dsa-2752