Vulnerability in Debian Phpbb3

CVE-2013-5724

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations.

EPSS: 0.004 (30.7th percentile) — read the EPSS interpretation.

Affected products

Debian Phpbb3 — versions 3.0.0-1, 3.0.0-2, 3.0.0-b5
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
cve@mitre.org (x_refsource_CONFIRM)