Drupal Prior to 6.16 and 5.22 Multiple Security Vulnerabilities

Bugtraq ID:	38545
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Mar 04 2010 12:00AM
Updated:	Apr 16 2015 05:44PM
Credit:	David Rothstein, Martin Barbella, Justin Klein Keane, Craig A. Hancock
Vulnerable:	Drupal Drupal 6.9 Drupal Drupal 6.7 Drupal Drupal 6.6 Drupal Drupal 6.5 Drupal Drupal 6.4 Drupal Drupal 6.3 Drupal Drupal 6.2 Drupal Drupal 6.15 Drupal Drupal 6.14 Drupal Drupal 6.13 Drupal Drupal 6.12 Drupal Drupal 6.11 Drupal Drupal 6.10 Drupal Drupal 6.1 Drupal Drupal 6.0 Drupal Drupal 5.9 Drupal Drupal 5.8 Drupal Drupal 5.7 Drupal Drupal 5.6 Drupal Drupal 5.5 Drupal Drupal 5.4 Drupal Drupal 5.3 Drupal Drupal 5.21 Drupal Drupal 5.20 Drupal Drupal 5.2 Drupal Drupal 5.19 Drupal Drupal 5.18 Drupal Drupal 5.17 Drupal Drupal 5.16 Drupal Drupal 5.15 Drupal Drupal 5.13 Drupal Drupal 5.12 Drupal Drupal 5.11 Drupal Drupal 5.10 Drupal Drupal 5.1 revision 1.1 Drupal Drupal 5.1 Drupal Drupal 5.0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	Drupal Drupal 6.16 Drupal Drupal 5.22

Drupal Prior to 6.16 and 5.22 Multiple Security Vulnerabilities

Drupal is prone to multiple vulnerabilities, including cross-site scripting issues, a phishing issue, and a security-bypass issue.

An attacker may leverage these issues to execute arbitrary code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, bypass security restrictions, or perform other attacks.

These issues affect the following:

Drupal 5.x prior to 5.22
Drupal 6.x prior to 6.16

Drupal Prior to 6.16 and 5.22 Multiple Security Vulnerabilities

An attacker can use standard tools to exploit these issues. In some situations, the attacker must trick a victim into following a malicious URI.

The following example URI is available for the redirect issue:

http://www.example.com/drupal-6.16/index.php?q=http://www.example.net

Drupal Prior to 6.16 and 5.22 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Drupal Drupal 5.18

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 5.19

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 5.13

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 5.10

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Debian Linux 5.0 ia-64

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 6.13

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 5.12

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 6.15

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 5.2

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Debian Linux 5.0 alpha

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 5.3

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 6.0

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Debian Linux 5.0 ia-32

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 6.9

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 6.12

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Debian Linux 5.0 s/390

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 6.11

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 5.9

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Debian Linux 5.0 mipsel

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 5.1

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 5.0

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 5.6

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 5.21

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 6.14

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 6.1

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 5.16

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Debian Linux 5.0 hppa

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 5.8

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 5.15

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 5.1 revision 1.1

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Debian Linux 5.0 m68k

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Debian Linux 5.0 arm

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 5.11

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 6.10

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 5.5

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Debian Linux 5.0 armel

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Debian Linux 5.0

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 6.5

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 5.7

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Drupal 6.7

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Debian Linux 5.0 amd64

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 6.3

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 5.20

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Debian Linux 5.0 mips

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 6.2

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 6.6

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Debian Linux 5.0 powerpc

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 6.4

• Drupal drupal-6.16.tar.gz
  http://ftp.drupal.org/files/projects/drupal-6.16.tar.gz

Drupal Drupal 5.4

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Debian Linux 5.0 sparc

• Debian drupal6_6.6-3lenny5_all.deb
  http://security.debian.org/pool/updates/main/d/drupal6/drupal6_6.6-3le nny5_all.deb

Drupal Drupal 5.17

• Drupal drupal-5.22.tar.gz
  http://ftp.drupal.org/files/projects/drupal-5.22.tar.gz

Drupal Prior to 6.16 and 5.22 Multiple Security Vulnerabilities

References:

• Drupal Global Redirect 6.x-1.2 Arbitrary Redirection (Mad Irish)
  
• Drupal Homepage (Drupal)
  
• Global Redirect 6.x-1.2 Arbitrary Redirection (Justin C. Klein Keane)
  
• Non-clean to Clean allows external redirect (benpjohnson)
  
• SA-CORE-2010-001 - Drupal core - Multiple vulnerabilities (Drupal)