Drupal Node Access User Reference Module Security Bypass Vulnerability

Bugtraq ID:	34778
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 29 2009 12:00AM
Updated:	Apr 30 2009 04:56PM
Credit:	Jakub Suchy of the Drupal security team and Bob Geiger
Vulnerable:	Drupal Node Access User Reference 6.x-2.0-beta5 Drupal Node Access User Reference 5.x-2.0-beta3
Not Vulnerable:	Drupal Node Access User Reference 6.x-2.0-beta6 Drupal Node Access User Reference 5.x-2.0-beta4

Drupal Node Access User Reference Module Security Bypass Vulnerability

The Node Access User Reference module for Drupal is prone to a security-bypass vulnerability that may allow attackers to gain access to sensitive areas of the application.

This issue affects versions prior to 5.x-2.0-beta4 and 6.x-2.0-beta6.

Drupal Node Access User Reference Module Security Bypass Vulnerability

Attackers can exploit this issue via a browser.

Drupal Node Access User Reference Module Security Bypass Vulnerability

Solution:
The vendor has released fixes and an advisory. Please see the references for more information.


Drupal Node Access User Reference 6.x-2.0-beta5

• Drupal nodeaccess_userreference-6.x-2.0-beta6.tar.gz
  http://ftp.drupal.org/files/projects/nodeaccess_userreference-6.x-2.0- beta6.tar.gz

Drupal Node Access User Reference 5.x-2.0-beta3

• Drupal nodeaccess_userreference-5.x-2.0-beta4.tar.gz
  http://ftp.drupal.org/files/projects/nodeaccess_userreference-5.x-2.0- beta4.tar.gz

Drupal Node Access User Reference Module Security Bypass Vulnerability

References:

• Drupal Language Switcher Dropdown Homepage (Drupal)
  
• SA-CONTRIB-2009-024 - Node Access User Reference - Access Bypass (Drupal)