bugtraq - Re: [myimei]MyBB 1.0.2 XSS attack in search.php

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200602080604.k1864HKj007368@cairo.mitre.org>
Date: Wed, 8 Feb 2006 01:04:17 -0500 (EST)
From: "Steven M. Christey" <coley@...re.org>
To: addmimistrator@...il.com
Cc: bugtraq@...urityfocus.com
Subject: Re: [myimei]MyBB 1.0.2 XSS attack in search.php

The advisory says:

>Status: patched in 1.0.3
...
>?????Solution???????
>No Patch available.
>(bug reported to vendor today)

I'm confused.  One part of this advisory says there's a patch
available, one part says there isn't.  (By the way, this is an example
of the "inconsistent" property of security advisories, in which most
advisories are either incomplete, inaccurate, inconsistent, or
incomprehensible, i.e. the Four I's principle)

It does not appear to be fixed, or at least the MyBB community forums
do not say anything.

For those keeping track at home, this is a different attack vector
than the sortby/sortorder (sorder) vectors identified by
CVE-2006-0470, which also happened to affect search.php in MyBB 1.0.2,
and appear to have been fixed by the vendor along with some other
issues if you review the manual patch [1].

- Steve

[1] http://community.mybboard.net/showthread.php?tid=6418