Read the docs
TI-2013-04876 Aliases CVE-2013-5724GHSA-433p-xc8c-2rxr

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache…

Priority LOW 11CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

Phpbb3 before 3.0.11-4 for Debian GNU/Linux uses world-writable permissions for cache files, which allows local users to modify the file contents via standard filesystem write operations.

Why it matters now

EPSS 0.0038 32nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:a:debian:phpbb3:*:*:*:*:*:*:*:*up to 3.0.11-3VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.0-1:*:*:*:*:*:*:*3.0.0-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.0-2:*:*:*:*:*:*:*3.0.0-2VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.0-b5:*:*:*:*:*:*:*3.0.0-b5VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.0-rc1:*:*:*:*:*:*:*3.0.0-rc1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.0-rc2-1:*:*:*:*:*:*:*3.0.0-rc2-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.0-rc3-1:*:*:*:*:*:*:*3.0.0-rc3-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.0-rc4-1:*:*:*:*:*:*:*3.0.0-rc4-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.0-rc5-1:*:*:*:*:*:*:*3.0.0-rc5-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.0-rc7-1:*:*:*:*:*:*:*3.0.0-rc7-1VulnerableDebian
  • cpe:2.3:a:debian:phpbb3:*:*:*:*:*:*:*:* Versions up to 3.0.11-3 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.0-1:*:*:*:*:*:*:* Versions 3.0.0-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.0-2:*:*:*:*:*:*:* Versions 3.0.0-2 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.0-b5:*:*:*:*:*:*:* Versions 3.0.0-b5 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.0-rc1:*:*:*:*:*:*:* Versions 3.0.0-rc1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.0-rc2-1:*:*:*:*:*:*:* Versions 3.0.0-rc2-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.0-rc3-1:*:*:*:*:*:*:* Versions 3.0.0-rc3-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.0-rc4-1:*:*:*:*:*:*:* Versions 3.0.0-rc4-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.0-rc5-1:*:*:*:*:*:*:* Versions 3.0.0-rc5-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.0-rc7-1:*:*:*:*:*:*:* Versions 3.0.0-rc7-1 Vulnerable ·Debian
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:debian:phpbb3:3.0.1-1:*:*:*:*:*:*:*3.0.1-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.2-1:*:*:*:*:*:*:*3.0.2-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.2-2:*:*:*:*:*:*:*3.0.2-2VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.2-3:*:*:*:*:*:*:*3.0.2-3VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.2-4:*:*:*:*:*:*:*3.0.2-4VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.4-1:*:*:*:*:*:*:*3.0.4-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.7-p1-1:*:*:*:*:*:*:*3.0.7-p1-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.7-p1-2:*:*:*:*:*:*:*3.0.7-p1-2VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.7-p1-3:*:*:*:*:*:*:*3.0.7-p1-3VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.7-p1-4:*:*:*:*:*:*:*3.0.7-p1-4VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.7-p1-5:*:*:*:*:*:*:*3.0.7-p1-5VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.9-1:*:*:*:*:*:*:*3.0.9-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.10-1:*:*:*:*:*:*:*3.0.10-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.10-2:*:*:*:*:*:*:*3.0.10-2VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.11-1:*:*:*:*:*:*:*3.0.11-1VulnerableDebian
cpe:2.3:a:debian:phpbb3:3.0.11-2:*:*:*:*:*:*:*3.0.11-2VulnerableDebian
  • cpe:2.3:a:debian:phpbb3:3.0.1-1:*:*:*:*:*:*:* Versions 3.0.1-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.2-1:*:*:*:*:*:*:* Versions 3.0.2-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.2-2:*:*:*:*:*:*:* Versions 3.0.2-2 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.2-3:*:*:*:*:*:*:* Versions 3.0.2-3 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.2-4:*:*:*:*:*:*:* Versions 3.0.2-4 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.4-1:*:*:*:*:*:*:* Versions 3.0.4-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.7-p1-1:*:*:*:*:*:*:* Versions 3.0.7-p1-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.7-p1-2:*:*:*:*:*:*:* Versions 3.0.7-p1-2 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.7-p1-3:*:*:*:*:*:*:* Versions 3.0.7-p1-3 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.7-p1-4:*:*:*:*:*:*:* Versions 3.0.7-p1-4 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.7-p1-5:*:*:*:*:*:*:* Versions 3.0.7-p1-5 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.9-1:*:*:*:*:*:*:* Versions 3.0.9-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.10-1:*:*:*:*:*:*:* Versions 3.0.10-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.10-2:*:*:*:*:*:*:* Versions 3.0.10-2 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.11-1:*:*:*:*:*:*:* Versions 3.0.11-1 Vulnerable ·Debian
  • cpe:2.3:a:debian:phpbb3:3.0.11-2:*:*:*:*:*:*:* Versions 3.0.11-2 Vulnerable ·Debian

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-5724
  2. 2026-10-03 Alias added: GHSA-433p-xc8c-2rxr

References

Advisory 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences