This script is Copyright (C) 2009-2015 Tenable Network Security, Inc.
The remote Fedora host is missing a security update.
Fixes SA-CORE-2009-006 ( http://drupal.org/node/461886 ). Remember to
log in to your site as the admin user before upgrading this package.
After upgrading the package, browse to http://host/drupal/update.php
to run the upgrade script. When outputting user-supplied data Drupal
strips potentially dangerous HTML attributes and tags or escapes
characters which have a special meaning in HTML. This output filtering
secures the site against cross site scripting attacks via user input.
Certain byte sequences that are valid in the UTF-8 specification are
potentially dangerous when interpreted as UTF-7. Internet Explorer 6
and 7 may decode these characters as UTF-7 if they appear before the
<meta http-equiv ='Content-Type' /> tag that specifies the page
content as UTF-8, despite the fact that Drupal also sends a real HTTP
header specifying the content as UTF-8. This enables attackers to
execute cross site scripting attacks with UTF-7. SA- CORE-2009-005 -
Drupal core - Cross site scripting contained an incomplete fix for the
issue. HTML exports of books are still vulnerable, which means that
anyone with edit permissions for pages in outlines is able to insert
arbitrary HTML and script code in these exports. Additionally, the
taxonomy module allows users with the 'administer taxonomy' permission
to inject arbitrary HTML and script code in the help text of any
vocabulary. Wikipedia has more information about cross site scripting
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.
See also :
Update the affected drupal package.
Risk factor :
Medium / CVSS Base Score : 6.5
CVSS Temporal Score : 5.7
Public Exploit Available : true