PT-2006-5495 · Drupal · Drupal

Eric Drechsel · Publicado 2006-09-12 · Atualizado 2011-03-08 · CVE-2006-4717

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Drupal 4.7 Pubcookie module versions prior to 1.2.2.4 Drupal 4.6 Pubcookie module versions prior to 1.6.2.1

Description The login redirection mechanism in the Pubcookie module allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors.

Recommendations For Drupal 4.7 Pubcookie module versions prior to 1.2.2.4, update to version 1.2.2.4 or later. For Drupal 4.6 Pubcookie module versions prior to 1.6.2.1, update to version 1.6.2.1 or later.

Correção

Identificadores relacionados

CVE-2006-4717

Produtos afetados

Drupal

Referências · 6

• http://securityfocus.com/bid/19920 · Correção
• http://secunia.com/advisories/21811 · Aviso do Fabricante
• http://drupal.org/node/83064 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-4717 · Nota de Segurança
• http://vupen.com/english/advisories/2006/3530 · Nota
• http://osvdb.org/28623 · Nota