CVE-2005-1871: High severity drupal drupal vulnerability

Published Jun 7, 2005

Updated

Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."

Affected Software

7 affected components

Drupal Drupal=4.6.0

Drupal Drupal=4.5.0

Drupal Drupal=4.5.2

Drupal Drupal=4.4.1

Drupal Drupal=4.5.1

Drupal Drupal=4.4.2

Drupal Drupal=4.4.0

Event History

Jun 7, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1871?

The severity of CVE-2005-1871 is considered to be high due to the potential for remote attackers to gain unauthorized privileges.

How do I fix CVE-2005-1871?

To fix CVE-2005-1871, upgrading to a patched version of Drupal higher than 4.6.0 is recommended.

Which versions of Drupal are affected by CVE-2005-1871?

CVE-2005-1871 affects Drupal versions 4.4.0 to 4.6.0.

What are the consequences of exploiting CVE-2005-1871?

Exploitation of CVE-2005-1871 allows remote attackers to gain elevated privileges, potentially compromising website security.

Is public registration a risk factor for CVE-2005-1871?

Yes, enabling public registration in Drupal increases the risk associated with CVE-2005-1871, allowing attackers to exploit the vulnerability.