CVE Catalog
CVE-2005-0269
CriticalSummary
In GNUBoard 3.40 and earlier, the file extension check only verifies extensions that contain all lowercase letters, allowing remote attackers to upload arbitrary files via file extensions that include uppercase letters.
Risk Assessment
An attacker can upload a malicious file (e.g., PHP script) to the server, potentially leading to remote code execution and compromise of the application.
Recommendation
It is recommended to update GNUBoard to the latest version and implement case-insensitive file extension validation.
Original NVD description (English source)
The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.