Andreas Beckmann discovered that phpBB, a web forum, as installed in Debian, sets incorrect permissions for cached files, allowing a malicious local user to overwrite them.
For the oldstable distribution (squeeze), this problem has been fixed in version 3.0.7-PL1-4+squeeze1. For the stable distribution (wheezy), this problem has been fixed in version 3.0.10-4+deb7u1. For the unstable distribution (sid), this problem has been fixed in version 3.0.11-4. We recommend that you upgrade your phpbb3 packages.
phpBB is a high powered, fully scalable, and highly customizable bulletin board, with a user-friendly interface, simple and straightforward administration panel, and helpful FAQ.
phpbb3 on Debian Linux
This check tests the installed software version using the apt package manager.
Updated on 2015-03-25