CVE-2014-5170

The Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute arbitrary code by leveraging failure to update .htaccess file contents after SA-CORE-2013-003...

CVE-2014-5170

The Storage API module 7.x before 7.x-1.6 for Drupal might allow remote attackers to execute arbitrary code by leveraging failure to update .htaccess file contents after SA-CORE-2013-003...

CVE-2014-5170

The CVE-2014-5170 entry concerns the Drupal Storage API module. Affected: Storage API module for Drupal 7.x before 7.x-1.6. Root cause: failure to update .htaccess file contents after SA-CORE-2013-003, enabling remote attackers to execute arbitrary code. The issue is documented in DRUPAL-SA-CONTR...

Fedora 20 : drupal7-7.24-1.fc20 (2013-21956)

Update to upstream 7.24 release for security fixes - Upstream changelog for this release is available at https://drupal.org/drupal-7.24-release-notes - SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities - http://drupal.org/SA-CORE-2013-003 Note that Tenable Network Security has extracted...

Fedora 20 : drupal6-6.29-1.fc20 (2013-22352)

Update to upstream 6.29 release for security fixes - Upstream changelog for this release is available at https://drupal.org/drupal-6.29-release-notes - SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities - http://drupal.org/SA-CORE-2013-003 Note that Tenable Network Security has extracted...

Fedora 19 : drupal6-6.29-1.fc19 (2013-22507)

Update to upstream 6.29 release for security fixes - Upstream changelog for this release is available at https://drupal.org/drupal-6.29-release-notes - SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities - http://drupal.org/SA-CORE-2013-003 Note that Tenable Network Security has extracted...

[ MDVSA-2013:287 ] drupal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:287 http://www.mandriva.com/en/support/security/ Package : drupal Date : November 26, 2013 Affected: Business Server 1.0 Problem Description: Multiple security issues was identified and fixed in drupal: Drup...

Fedora 19 : drupal7-7.24-1.fc19 (2013-21844)

Update to upstream 7.24 release for security fixes - Upstream changelog for this release is available at https://drupal.org/drupal-7.24-release-notes - SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities - http://drupal.org/SA-CORE-2013-003 Note that Tenable Network Security has extracted...

Mandriva Linux Security Advisory : drupal (MDVSA-2013:287-1)

Multiple security issues was identified and fixed in drupal : Drupal core's Image module allows for the on-demand generation of image derivatives. This capability can be abused by requesting a large number of new derivatives which can fill up the server disk space, and which can cause a very high...