UseBB Support Forum

Official support for the UseBB 1 forum system

UseBB 1.0.6 released

Locked

Page: 1

Author Post
Developer
Registered: Apr 2004
Posts: 2310
Location: Belgium
The UseBB Team is happy to announce version 1.0.6 of the light and Open Source PHP/MySQL bulletin board package "UseBB".

Version 1.0.6 is a minor security and bug fix release. Changes include but are not limited to:
- fixed a full path disclosure vulnerability;
- fixed a bug that posed problems when setting certain time zones;
- fixed more bugs in the SQL Toolbox and ACP Modules panes of the ACP.

Upgrading is highly recommended. Visit http://www.usebb.net/downloads/ for downloads. Information about upgrading is available in the docs/index.html document.

The discovered security vulnerability (full path disclosure) only occurs on PHP setups with register_globals enabled and certain GET or POST variables passed to the system, resulting into an error containing the script's full path on the web server. This vulnerability itself cannot be exploited directly, but the disclosed information may be abused by people with system access.

Thanks to Jesper Jurcenoks of netVigilance, Inc. for reporting this. Their security advisory can be found at http://www.netvigilance.com/advisory0016.
« Last edit by Dietrich on Wed Apr 25, 2007 1:49 pm. »
Member
Registered: May 2005
Posts: 418
Well done, thanks Dietrich.

Now if I can only download it, seems SF is down.
Developer
Registered: Apr 2004
Posts: 2310
Location: Belgium
Works here, perhaps you should choose a different download mirror?
Member
Registered: May 2005
Posts: 418
All I get is Failure To Connect To Web Server, even SF logo image here doesn't load.
Developer
Registered: Apr 2004
Posts: 2310
Location: Belgium
I guess it must be something local. Perhaps it has been solved now?
Member
Registered: May 2005
Posts: 418
Got it, worked all the sudden.
Member
Registered: Apr 2007
Posts: 29
Location: Haifa, IL
Good Luck!
_______________
Best Regards,
Member
Registered: Jun 2007
Posts: 4
Good Luck ! With 2.0
Member
Registered: Jul 2007
Posts: 20
Location: Hatfield, UK (Lithuania)
Nice boards, I see. I will translate the package to Lithuanian.

Locked

Page: 1

UseBB Support Forum is powered by UseBB 1 Forum Software