Drupal Misery Module Denial Of Service Vulnerability
BID:63705
Info
Drupal Misery Module Denial Of Service Vulnerability
| Bugtraq ID: | 63705 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-4599 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 13 2013 12:00AM |
| Updated: | Nov 19 2013 06:46AM |
| Credit: | David Norman |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Drupal Misery Module Denial Of Service Vulnerability
The Misery module for Drupal is prone to a remote denial-of-service vulnerability.
An attacker can leverage this issue to crash the affected application and affect file operations, resulting in a denial-of-service condition.
Misery versions 7.x-2.x prior to 7.x-2.3 and 6.x-2.x prior to 6.x-2.5 are vulnerable.
The Misery module for Drupal is prone to a remote denial-of-service vulnerability.
An attacker can leverage this issue to crash the affected application and affect file operations, resulting in a denial-of-service condition.
Misery versions 7.x-2.x prior to 7.x-2.3 and 6.x-2.x prior to 6.x-2.5 are vulnerable.
Exploit / POC
Drupal Misery Module Denial Of Service Vulnerability
Attackers can use standard, readily available tools to exploit this issue.
Attackers can use standard, readily available tools to exploit this issue.
Solution / Fix
Drupal Misery Module Denial Of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.