CVE-2005-0269 | BDVDB-2026-7991 Detail

Description#

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=110477648219738&w=2
http://secunia.com/advisories/13711
http://www.securityfocus.com/bid/12149
https://exchange.xforce.ibmcloud.com/vulnerabilities/18729

Exploit#

No public exploit known

History#

Version 12005-02-10Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.