Drupal Link Checker Security Bypass Vulnerability

Bugtraq ID:	52038
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 15 2012 12:00AM
Updated:	Feb 15 2012 12:00AM
Credit:	Ivo Van Geertruyen, Dave Reidm Alexander Hass and David Rothstein of the Drupal Security Team
Vulnerable:	Drupal Link Checker 6.X-2.4
Not Vulnerable:	Drupal Link Checker 6.x-2.5

Drupal Link Checker Security Bypass Vulnerability

The Link Checker module for Drupal is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass security restrictions to obtain sensitive information or perform unauthorized actions; this may aid in launching further attacks.

Versions prior to Link Checker 6.x-2.5 are vulnerable.

Drupal Link Checker Security Bypass Vulnerability

Attackers can exploit this issue through a browser.

Drupal Link Checker Security Bypass Vulnerability

Solution:
Updates are available; please see the references for more information.

Drupal Link Checker Security Bypass Vulnerability

References:

• Drupal Homepage (Drupal)
  
• SA-CONTRIB-2012-019 - Link checker - Access bypass (Drupal)