edna.edu.au

drupal6: Multiple Vulnerabilities

Package        : drupal6
Vulnerability  : multiple
Problem type   : remote
Debian-specific: no
Debian Bug     : 526378

Multiple vulnerabilities have been discovered in drupal, a web content
management system.

pod.Edge discovered a cross-site scripting vulnerability due that can be
triggered when some browsers interpret UTF-8 strings as UTF-7 if they
appear before the generated HTML document defines its Content-Type.
This allows a malicious user to execute arbitrary javascript in the
context of the web site if they're allowed to post content.

Moritz Naumann discovered an information disclosure vulnerability.  If
a user is tricked into visiting the site via a specially crafted URL
and then submits a form (such as the search box) from that page, the
information in their form submission may be directed to a third-party
site determined by the URL and thus disclosed to the third party. The
third party site may then execute a cross-site request forgery attack
against the submitted form.

For the stable distribution (lenny), these problems have been fixed in 
version 6.6-3lenny1.

The old stable distribution (etch) does not contain drupal and is not
affected.

For the unstable distribution (sid), these problems have been fixed in
version 6.11-1

Operating System:     Debian GNU/Linux 5.0
Impact:               Execute Arbitrary Code/Commands
                      Read-only Data Access
                      Cross-site Request Forgery
                      Cross-site Scripting
Access:               Remote/Unauthenticated

Tags: internet security drupal auscert
Posted at 09:57PM May 07, 2009 by John Chen  |