[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1007-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1007-1 [email protected] http://www.debian.org/security/ Martin Schulze March 17th, 2006 http://www.debian.org/security/faq -...

CVE-2006-1227

Drupal CVE-2006-1227 affects Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 when using the menu.module to create a menu item. The issue: missing access control on the referenced page, which could allow remote attackers to access administrator pages. The OpenVAS/Debian advisories corroborate tha...