CVE

Id
33859  
CVE No.
CVE-2008-3742  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated.  
Phase
Assigned (20080820)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
369335 33859 CVE-2008-3742 CONFIRM:http://drupal.org/node/295053  View
369336 33859 CVE-2008-3742 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=459108  View
369337 33859 CVE-2008-3742 FEDORA:FEDORA-2008-7467  View
369338 33859 CVE-2008-3742 URL:https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html  View
369339 33859 CVE-2008-3742 FEDORA:FEDORA-2008-7626  View
369340 33859 CVE-2008-3742 URL:https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html  View
369341 33859 CVE-2008-3742 BID:30689  View
369342 33859 CVE-2008-3742 URL:http://www.securityfocus.com/bid/30689  View
369343 33859 CVE-2008-3742 SECUNIA:31462  View
369344 33859 CVE-2008-3742 URL:http://secunia.com/advisories/31462  View
369345 33859 CVE-2008-3742 VUPEN:ADV-2008-2392  View
369346 33859 CVE-2008-3742 URL:http://www.vupen.com/english/advisories/2008/2392  View
369347 33859 CVE-2008-3742 SECUNIA:31825  View
369348 33859 CVE-2008-3742 URL:http://secunia.com/advisories/31825  View
369349 33859 CVE-2008-3742 XF:drupal-blogapi-file-upload(44447)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50848 JVNDB-2008-006158 neon におけるサービス運用妨害 (DoS) の脆弱性 neon は、ダイジェスト認証、ダイジェスト domain パラメータのサポート、および parse_domain 関数に関する処理に不備があるため、サービス運用妨害 (NULL ポインタデリファレンスおよびクラッシュ) 状態となる脆弱性が存在します。 CVE-2008-3746 33859 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006158.html  View