kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Upgrade drupal-pubcookie to the latest version fixing a security hole

Browse source 
allowing anyone to bypass the authenication system and become an
arbitrary drupal user.

Security:	vid:c0fd7890-4346-11db-89cc-000ae42e9b93
This commit is contained in:
Brooks Davis 2006-09-13 18:03:26 +00:00
parent 58bfbb4cf8
commit 0b6c7b4013
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=172961
3 changed files with 34 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
security/vuxml/vuln.xml
View file

@ -34,6 +34,35 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
<vuln vid="c0fd7890-4346-11db-89cc-000ae42e9b93">
<topic>drupal-pubcookie -- authentication may be bypassed</topic>
<affects>
<package>
<name>drupal-pubcookie</name>
<range><le>4.6.0_20060210</le></range>
</package>
</affects>
<description>
<body xmlns="http://www.w3.org/1999/xhtml">
<p>The Drupal Project reports:</p>
<blockquote cite="http://drupal.org/node/83064">
<p>It is possible for a malicious user to spoof a user's
identity by bypassing the login redirection mechanism in the
pubcookie module. The malicious user may gain the privileges
of the user they are spoofing, including the administrative
user.</p>
</blockquote>
</body>
</description>
<references>
<url>http://drupal.org/node/83064</url>
</references>
<dates>
<discovery>2006-09-08</discovery>
<entry>2006-09-13</entry>
</dates>
</vuln>
<vuln vid="7c75d48c-429b-11db-afae-000c6ec775d9">
<topic>linux-flashplugin7 -- arbitrary code execution vulnerabilities</topic>
<affects>

4
www/drupal-pubcookie/Makefile
View file

@ -7,9 +7,9 @@
PORTNAME= pubcookie
DISTVERSION= ${DRUPAL_VERSION}
PORTREVISION= 20060210
PORTREVISION= 20060907
CATEGORIES= www security
MASTER_SITE_SUBDIR= brooks
MASTER_SITE= http://ftp.osuosl.org/pub/drupal/files/projects/
MAINTAINER= brooks@FreeBSD.org
COMMENT= Pubcookie user authentication for the Drupal CMS

6
www/drupal-pubcookie/distinfo
View file

@ -1,3 +1,3 @@
MD5 (drupal/pubcookie-4.6.0.tar.gz) = ee24cf02f8a27e19fb584b75a29ebf1c
SHA256 (drupal/pubcookie-4.6.0.tar.gz) = 65534d207e34fff7068a891b9f8785c3f4d7be242010c4cea27d9f17fd744fa2
SIZE (drupal/pubcookie-4.6.0.tar.gz) = 12351
MD5 (drupal/pubcookie-4.6.0.tar.gz) = 9c924c497ef0220334a1f61451200db6
SHA256 (drupal/pubcookie-4.6.0.tar.gz) = 408670dfb87ad9bba7ff738490037e9fd26ced8f1f5399433392ffa0521e6f5a
SIZE (drupal/pubcookie-4.6.0.tar.gz) = 12361