DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character, which allows remote authenticated users to login as the "space" user, post as the guest user, and block the ability of an administrator to ban the "space" user.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2006-07-21T21:00:00
Updated: 2018-10-17T20:57:01
Reserved: 2006-07-21T00:00:00
Link: CVE-2006-3796
JSON object: View
NVD Information
Status : Modified
Published: 2006-07-24T12:19:00.000
Modified: 2018-10-17T21:30:13.577
Link: CVE-2006-3796
JSON object: View
Redhat Information
No data.
CWE