Description (CNA)
install.php in Drupal 5.x before 5.3, when the configured database server is not reachable, allows remote attackers to execute arbitrary code via vectors that cause settings.php to be modified.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://drupal.org/files/sa-2007-025/SA-2007-025-5.2.patch
- http://osvdb.org/39648
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37265
- http://drupal.org/node/184316
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html
- http://secunia.com/advisories/27352
- http://secunia.com/advisories/27290
- http://www.securityfocus.com/bid/26119
ADP enrichment
No English description supplied.
- http://drupal.org/files/sa-2007-025/SA-2007-025-5.2.patch
- http://osvdb.org/39648
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37265
- http://drupal.org/node/184316
- https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00328.html
- http://secunia.com/advisories/27352
- http://secunia.com/advisories/27290
- http://www.securityfocus.com/bid/26119