CVE-2006-6841

Publication date 31 December 2006

Last updated 24 July 2024

Description

Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors.

Show unmaintained releases

Package	Ubuntu Release	Status
phpbb2	9.10 karmic	Not in release
	9.04 jaunty	Not in release
	8.10 intrepid	Fixed 2.0.21-6
	8.04 LTS hardy	Fixed 2.0.21-6
	7.10 gutsy	Fixed 2.0.21-6
	7.04 feisty	Fixed 2.0.21-6
	6.10 edgy	Ignored end of life, was needed
	6.06 LTS dapper	Ignored end of life

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
phpbb2	Vendor: http://www.debian.org/security/2008/dsa-1488