ID CVE-2009-1037
Summary Unspecified vulnerability in the Send by e-mail module in the "Printer, e-mail and PDF versions" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to send unlimited spam messages via unknown vectors related to the flood control API.
References
Vulnerable Configurations
  • cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-1.x-dev:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-2.x-dev:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-3.2:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-3.3:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-3.4:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-3.6:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-4.2:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-4.3:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:5.x-4.x:dev:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:5.x-4.x:dev:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.0-rc3:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.0-rc4:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.0-rc5:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.0-rc8:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.0-rc9:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:print:6.x-1.x-dev:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:print:6.x-1.x-dev:*:*:*:*:*:*:*
  • cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
    cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 26-03-2009 - 04:00)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:N
refmap via4
bid 34173
confirm http://drupal.org/node/406516
osvdb 52785
secunia 34374
Last major update 26-03-2009 - 04:00
Published 20-03-2009 - 18:30
Last modified 26-03-2009 - 04:00
Back to Top