1. CVE-Search
  2. CVE-2006-4717
ID CVE-2006-4717
Summary The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors. Drupal core is not affected. If you do not use the pubcookie module, no action is necessary.
References
Vulnerable Configurations
  • cpe:2.3:a:drupal:drupal_pubcookie_module:1.2.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:drupal_pubcookie_module:1.2.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:drupal_pubcookie_module:1.6.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:drupal_pubcookie_module:1.6.2.1:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 08-03-2011 - 02:41)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 19920
confirm http://drupal.org/node/83064
osvdb 28623
secunia 21811
vupen ADV-2006-3530
Last major update 08-03-2011 - 02:41
Published 12-09-2006 - 16:07
Last modified 08-03-2011 - 02:41
Back to Top