PT-2005-2828 · Drupal · Drupal

Uwe Hermann · Publicado 2005-06-07 · Atualizado 2016-10-18 · CVE-2005-1871

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Drupal versions 4.4.0 through 4.6.0

Description The issue is related to an unknown vulnerability in the privilege system. When public registration is enabled, remote attackers can gain privileges due to an input check that is not implemented properly.

Recommendations For versions 4.4.0 through 4.6.0, consider disabling public registration as a temporary workaround until a patch is available. Restrict access to the privilege system to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-1871

Produtos afetados

Drupal

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-1871 · Nota de Segurança
• http://secunia.com/advisories/15372 · Nota
• http://marc.info/?l=bugtraq&m=111782257601422&w=2 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2005-06/0010.html · Nota
• http://osvdb.org/17028 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1871 · Nota