PT-2006-5495 · Drupal · Drupal

Eric Drechsel · Published 2006-09-12 · Updated 2011-03-08 · CVE-2006-4717

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Drupal 4.7 Pubcookie module versions prior to 1.2.2.4 Drupal 4.6 Pubcookie module versions prior to 1.6.2.1

Description The login redirection mechanism in the Pubcookie module allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors.

Recommendations For Drupal 4.7 Pubcookie module versions prior to 1.2.2.4, update to version 1.2.2.4 or later. For Drupal 4.6 Pubcookie module versions prior to 1.6.2.1, update to version 1.6.2.1 or later.

Fix

Related Identifiers

CVE-2006-4717

Affected Products

Drupal

References · 6

• http://securityfocus.com/bid/19920 · Patch
• http://secunia.com/advisories/21811 · Vendor Advisory
• http://drupal.org/node/83064 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4717 · Security Note
• http://vupen.com/english/advisories/2006/3530 · Note
• http://osvdb.org/28623 · Note