Uwe Hermann
08/01/07, 12:47
--3MwIy2ne0vdjdPXF
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
----------------------------------------------------------------------------
Drupal security advisory DRUPAL-SA-2007-001
----------------------------------------------------------------------------
Project: Drupal core.
Date: 2007-Jan-05.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Cross site scripting.
----------------------------------------------------------------------------
=20
Description
-----------
A few arguments passed via URLs are not properly sanitized before display.=
=20
When an attacker is able to entice an administrator to follow a specially=
=20
crafted link, arbitrary HTML and script code can be injected and executed i=
n=20
the victim's session. Such an attack may lead to administrator access if=20
certain conditions are met.
=20
Versions affected
-----------------
- Drupal 4.6.x versions before Drupal 4.6.11
- Drupal 4.7.x versions before Drupal 4.7.5
Solution
--------
- If you are running Drupal 4.6.x then upgrade to Drupal 4.6.11.
http://ftp.osuosl.org/pub/drupal/files/projects/drupal-4.6.11.tar.gz
- If you are running Drupal 4.7.x then upgrade to Drupal 4.7.5.
http://ftp.osuosl.org/pub/drupal/files/projects/drupal-4.7.5.tar.gz
- To patch Drupal 4.6.10 use http://drupal.org/files/sa-2007-001/4.6.10.pat=
ch.
- To patch Drupal 4.7.4 use http://drupal.org/files/sa-2007-001/4.7.4.patch.
Please note that the patches only contain changes related to this advisory,=
and=20
do not fix bugs that were solved in 4.6.11 or 4.7.5.
Reported by
-----------
Anonymous via JPCERT.
Contact
-------
The security contact for Drupal can be reached at security at drupal.org or=
=20
using the form at http://drupal.org/contact.
// Uwe Hermann, on behalf of the Drupal Security Team.
--=20
http://www.hermann-uwe.de | http://www.holsham-traders.de
http://www.crazy-hacks.org | http://www.unmaintained-free-software.org
--3MwIy2ne0vdjdPXF
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFFnjsQXdVoV3jWIbQRAobGAJkBPrOw8BAXk2vw4w4WOA GYUryckACeJ67b
NJgScdPLWEcPbk/12KrNbPg=
=r1iO
-----END PGP SIGNATURE-----
--3MwIy2ne0vdjdPXF--
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
----------------------------------------------------------------------------
Drupal security advisory DRUPAL-SA-2007-001
----------------------------------------------------------------------------
Project: Drupal core.
Date: 2007-Jan-05.
Security risk: Less critical.
Exploitable from: Remote.
Vulnerability: Cross site scripting.
----------------------------------------------------------------------------
=20
Description
-----------
A few arguments passed via URLs are not properly sanitized before display.=
=20
When an attacker is able to entice an administrator to follow a specially=
=20
crafted link, arbitrary HTML and script code can be injected and executed i=
n=20
the victim's session. Such an attack may lead to administrator access if=20
certain conditions are met.
=20
Versions affected
-----------------
- Drupal 4.6.x versions before Drupal 4.6.11
- Drupal 4.7.x versions before Drupal 4.7.5
Solution
--------
- If you are running Drupal 4.6.x then upgrade to Drupal 4.6.11.
http://ftp.osuosl.org/pub/drupal/files/projects/drupal-4.6.11.tar.gz
- If you are running Drupal 4.7.x then upgrade to Drupal 4.7.5.
http://ftp.osuosl.org/pub/drupal/files/projects/drupal-4.7.5.tar.gz
- To patch Drupal 4.6.10 use http://drupal.org/files/sa-2007-001/4.6.10.pat=
ch.
- To patch Drupal 4.7.4 use http://drupal.org/files/sa-2007-001/4.7.4.patch.
Please note that the patches only contain changes related to this advisory,=
and=20
do not fix bugs that were solved in 4.6.11 or 4.7.5.
Reported by
-----------
Anonymous via JPCERT.
Contact
-------
The security contact for Drupal can be reached at security at drupal.org or=
=20
using the form at http://drupal.org/contact.
// Uwe Hermann, on behalf of the Drupal Security Team.
--=20
http://www.hermann-uwe.de | http://www.holsham-traders.de
http://www.crazy-hacks.org | http://www.unmaintained-free-software.org
--3MwIy2ne0vdjdPXF
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFFnjsQXdVoV3jWIbQRAobGAJkBPrOw8BAXk2vw4w4WOA GYUryckACeJ67b
NJgScdPLWEcPbk/12KrNbPg=
=r1iO
-----END PGP SIGNATURE-----
--3MwIy2ne0vdjdPXF--