Drupal Prior To 4.7.11 and 5.6 Multiple Remote Vulnerabilities

Bugtraq ID:	27238
Class:	Unknown
CVE:	CVE-2008-0272
Remote:	Yes
Local:	No
Published:	Jan 10 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	The Drupal security team, Stefan Esser and Ultra Security Research are credited with the discovery of these vulnerabilities.
Vulnerable:	vbDrupal vbDrupal 5.3 vbDrupal vbDrupal 5.2 vbDrupal vbDrupal 4.7.6 4 vbDrupal vbDrupal 4.7.6 vbDrupal vbDrupal 4.7.5 Redhat Fedora 7 Drupal Drupal 4.7.10 Drupal Drupal 4.7.9 Drupal Drupal 4.7.8 Drupal Drupal 4.7.7 Drupal Drupal 4.7.6 Drupal Drupal 4.7.5 Drupal Drupal 4.7.4 Drupal Drupal 4.7.3 Drupal Drupal 4.7.2 Drupal Drupal 4.7.1 Drupal Drupal 4.7 Drupal Drupal 4.6.11 Drupal Drupal 4.6.10 Drupal Drupal 4.6.9 Drupal Drupal 4.6.8 Drupal Drupal 4.6.7 Drupal Drupal 4.6.6 Drupal Drupal 4.6.5 Drupal Drupal 4.6.4 Drupal Drupal 4.6.3 Drupal Drupal 4.6.2 Drupal Drupal 4.6.1 Drupal Drupal 4.6 Drupal Drupal 4.5.8 Drupal Drupal 4.5.7 Drupal Drupal 4.5.6 Drupal Drupal 4.5.5 Drupal Drupal 4.5.4 Drupal Drupal 4.5.3 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 arm + Debian Linux 3.1 alpha + Debian Linux 3.1 alpha + Debian Linux 3.1 + Debian Linux 3.1 Drupal Drupal 4.5.2 Drupal Drupal 4.5.1 Drupal Drupal 4.5 Drupal Drupal 4.4.3 Drupal Drupal 4.4.2 Drupal Drupal 4.4.1 Drupal Drupal 4.4 Drupal Drupal 4.2 .0 RC Drupal Drupal 4.1 .0 Drupal Drupal 4.0 .0 Drupal Drupal 5.5 Drupal Drupal 5.4 Drupal Drupal 5.3 Drupal Drupal 5.2 Drupal Drupal 5.1 revision 1.1 Drupal Drupal 5.1 Drupal Drupal 5.0 Drupal Drupal 4.7 revision 1.2 Drupal Drupal 4.7 revision 1.15 Drupal Drupal 4.7 Drupal Drupal 4.6
Not Vulnerable:	vbDrupal vbDrupal 5.6 vbDrupal vbDrupal 4.7.11 .0 Drupal Drupal 4.7.11 Drupal Drupal 5.6

Drupal Prior To 4.7.11 and 5.6 Multiple Remote Vulnerabilities

Attackers can exploit these issues via a browser.

Drupal Prior To 4.7.11 and 5.6 Multiple Remote Vulnerabilities

Solution:
The vendor has released updated versions to address these issues. Please see the references for more information.


Drupal Drupal 5.2

• Drupal drupal-5.6.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.6.tar.gz

Drupal Drupal 5.3

• Drupal drupal-5.6.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.6.tar.gz

Drupal Drupal 4.7 revision 1.2

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 5.1

• Drupal drupal-5.6.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.6.tar.gz

Drupal Drupal 5.0

• Drupal drupal-5.6.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.6.tar.gz

Drupal Drupal 4.6

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 5.1 revision 1.1

• Drupal drupal-5.6.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.6.tar.gz

Drupal Drupal 5.5

• Drupal drupal-5.6.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.6.tar.gz

Drupal Drupal 4.7

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7 revision 1.15

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 5.4

• Drupal drupal-5.6.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.6.tar.gz

Drupal Drupal 4.0 .0

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.1 .0

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.2 .0 RC

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.4

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.4.1

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.4.2

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.4.3

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.5

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.5.1

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.5.2

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.5.3

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.5.4

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.5.5

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.5.6

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.5.7

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.5.8

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.1

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.10

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.11

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.2

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.3

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.4

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.5

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.6

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.7

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.8

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.6.9

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7.1

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7.10

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7.2

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7.3

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7.4

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7.5

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

vbDrupal vbDrupal 4.7.5

• vbDrupal vbDrupal-4.7.11.0.zip
  http://downloads.sourceforge.net/vbdrupal/vbDrupal-4.7.11.0.zip?modtim e=1200153027&big_mirror=0

vbDrupal vbDrupal 4.7.6

• vbDrupal vbDrupal-4.7.11.0.zip
  http://downloads.sourceforge.net/vbdrupal/vbDrupal-4.7.11.0.zip?modtim e=1200153027&big_mirror=0

vbDrupal vbDrupal 4.7.6 4

• vbDrupal vbDrupal-4.7.11.0.zip
  http://downloads.sourceforge.net/vbdrupal/vbDrupal-4.7.11.0.zip?modtim e=1200153027&big_mirror=0

Drupal Drupal 4.7.6

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7.7

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7.8

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

Drupal Drupal 4.7.9

• Drupal drupal-4.7.11.tar.gz
  http://ftp.drupal.org/files/projects/drupal-4.7.11.tar.gz

vbDrupal vbDrupal 5.2

• vbDrupal vbDrupal-5.6.0a.tar.gz
  http://downloads.sourceforge.net/vbdrupal/vbDrupal-5.6.0a.tar.gz?modti me=1200158794&big_mirror=0

vbDrupal vbDrupal 5.3

• vbDrupal vbDrupal-5.6.0a.tar.gz
  http://downloads.sourceforge.net/vbdrupal/vbDrupal-5.6.0a.tar.gz?modti me=1200158794&big_mirror=0