Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit

To: thephuket@xxxxxxxxxx
Subject: Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit
From: comsatcat <comsatcat@xxxxxxxxxxxxx>
Date: Mon, 07 Mar 2005 13:15:24 -0700
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20050307173739.D7A6E5C0038@xxxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Posted-date: Mon, 7 Mar 2005 13:15:20 -0700
References: <20050307173739.D7A6E5C0038@xxxxxxxxxxxxxxxxxxx>

my appoligies, phpbb 2.0.13 is NOT vulnerable as stated previously.

References:
- phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit
  - From: thephuket