Drupal Multiple Security Bypass Vulnerabilities

Bugtraq ID:	24862
Class:	Access Validation Error
CVE:	CVE-2007-3690 CVE-2007-3689
Remote:	Yes
Local:	No
Published:	Jul 09 2007 12:00AM
Updated:	Jul 05 2016 10:00PM
Credit:	Drupal Security Team and Tim Harman reported these issues.
Vulnerable:	Drupal Print 5.0-1.1 Drupal Print 4.7 Drupal Forward 5.0 Drupal Forward 4.7-1.0 Drupal Forward 4.7
Not Vulnerable:	Drupal Print 5.0-1.2 Drupal Print 4.7-1.0 Drupal Forward 5.0-1.0 Drupal Forward 4.7-1.1

Drupal Multiple Security Bypass Vulnerabilities

Drupal is prone to multiple security-bypass vulnerabilities because of access-validation errors.

These issues affect the Forward and Print modules and may allow attackers to access potentially sensitive information that could aid in other attacks.

These versions are vulnerable:

Forward for Drupal 5.x before 5.x-1.0
Drupal 4.7.x before 4.7-1.1
Print for Drupal 5.x before 5.x-1.2
Drupal 4.7.x before 4.7-1.0

Drupal Multiple Security Bypass Vulnerabilities

An attacker can exploit this issue through a browser.

Drupal Multiple Security Bypass Vulnerabilities

Solution:
The vendor has released fixes to address these issues. Please see references for more information.

Drupal Multiple Security Bypass Vulnerabilities

References:

• Forward - Access bypass (Drupal)
  
• Print - Access bypass (Drupal)