PT-2010-1580 · Paypal+1 · Paypal Website Payments Standard+2

Publicado 2010-04-20 · Atualizado 2017-08-17 · CVE-2009-4771

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ubercart module versions 5.x before 5.x-1.9 Ubercart module versions 6.x before 6.x-2.1

Description The issue is related to the PayPal Website Payments Standard functionality in the Ubercart module for Drupal, which does not properly validate orders. This allows remote attackers to trigger unspecified "duplicate actions" via unknown vectors.

Recommendations For Ubercart module version 5.x, update to version 5.x-1.9 or later. For Ubercart module version 6.x, update to version 6.x-2.1 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-4771

Produtos afetados

Drupal

Paypal Website Payments Standard

Ubercart

Referências · 7

• http://securityfocus.com/bid/37058 · Nota
• http://drupal.org/node/636576 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4771 · Nota
• http://secunia.com/advisories/37440 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4771 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54346 · Nota
• http://osvdb.org/60290 · Nota