The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have
    unspecified other impact via unknown vectors related to contributed modules. (CVE-2008-4793)

The version of Drupal running on the remote web server is 5.x prior to 5.11 or 6.x prior to 6.5. It is, therefore, affected by the following vulnerabilities:

  - The validation functionality in the core upload module in Drupal 6.x before 6.5 allows remote,     authenticated users to bypass intended access restrictions and attach files to content, related to a     logic error. (CVE-2008-4789)   
  - The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended     access restrictions and read files attached to content via unknown vectors.(CVE-2008-4790)

  - The user module in Drupal 5.x before 5.11 and 6.x before 6.5 allows remote authenticated users to bypass     intended login access rules and successfully login via unknown vectors.(CVE-2008-4791)

  - The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate     unspecified content fields of an internal Drupal form, which allows remote, authenticated users to bypass     intended access restrictions via modified field values. (CVE-2008-4792)

  - The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have     unspecified other impact via unknown vectors related to contributed modules. (CVE-2008-4793)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Drupal Project reports :

A logic error in the core upload module validation allowed unprivileged users to attach files to content. Users can view files attached to content which they do not otherwise have access to. If the core upload module is not enabled, your site will not be affected.

A deficiency in the user module allowed users who had been blocked by access rules to continue logging into the site under certain conditions. If you do not use the 'access rules' functionality in core, your site will not be affected.

The BlogAPI module does not implement correct validation for certain content fields, allowing for values to be set for fields which would otherwise be inaccessible on an internal Drupal form. We have hardened these checks in BlogAPI module for this release, but the security team would like to re-iterate that the 'Administer content with BlogAPI' permission should only be given to trusted users. If the core BlogAPI module is not enabled, your site will not be affected.

A weakness in the node module API allowed for node validation to be bypassed in certain circumstances for contributed modules implementing the API. Additional checks have been added to ensure that validation is performed in all cases. This vulnerability only affects sites using one of a very small number of contributed modules, all of which will continue to work correctly with the improved API. None of them were found vulnerable, so our correction is a preventative measure.

ID	Name	Product	Family	Type	Severity
432606	SCA: security update for drupal/drupal (GHSA-ph2j-5hxq-gxrr)	Tenable Cloud Security	SCA Checks	Local	critical
432606	SCA: security update for drupal/drupal (GHSA-ph2j-5hxq-gxrr)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical
134979	Drupal 5.x < 5.11 / 6.x < 6.5 Multiple Vulnerabilities (SA-2008-060)	Nessus	CGI abuses	Remote	high
34389	FreeBSD : drupal -- multiple vulnerabilities (12efc567-9879-11dd-a5e7-0030843d3802)	Nessus	FreeBSD Local Security Checks	Local	high

Detections

Analytics

CVE-2008-4793

critical

Tenable Plugins

critical

critical

high

high