CVE-2007-0124

Опубликовано: 09 янв. 2007

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist.

Ссылки

http://drupal.org/node/104238
Patch
Vendor Advisory
http://osvdb.org/32131
http://secunia.com/advisories/23586
Patch
Vendor Advisory
http://securityreason.com/securityalert/2115
http://www.securityfocus.com/archive/1/456056/100/0/threaded
http://www.securityfocus.com/bid/21895
Exploit
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0051
http://drupal.org/node/104238
Patch
Vendor Advisory
http://osvdb.org/32131
http://secunia.com/advisories/23586
Patch
Vendor Advisory
http://securityreason.com/securityalert/2115
http://www.securityfocus.com/archive/1/456056/100/0/threaded
http://www.securityfocus.com/bid/21895
Exploit
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0051

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.9:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.6.10:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.7:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.7.3:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:4.7.4:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00825

Низкий

3.5 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2007-0124

ubuntu

больше 18 лет назад

CVE-2007-0124

debian

больше 18 лет назад

Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7. ...

GHSA-rq7c-6h8j-3jp6

github

около 3 лет назад

EPSS

Процентиль: 73%

0.00825

Низкий

3.5 Low

CVSS2

Дефекты

NVD-CWE-Other