CVE-2006-2743: Medium severity drupal drupal vulnerability
Published Jun 1, 2006
·Updated
Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with modmime, does not properly handle files with multiple extensions, which allows remote attackers to upload, modify, or execute arbitrary files in the files directory.
Affected Software
9 affected components
Drupal Drupal=4.6.0
Drupal Drupal=4.6
Drupal Drupal=4.6.5
Drupal Drupal=4.6.2
Drupal Drupal=4.6.3
Drupal Drupal=4.6.4
Drupal Drupal=4.7.0
Drupal Drupal=4.6.1
Drupal Drupal=4.6.6
Remediation
Patch Available
Patch Available
Event History
Jun 1, 2006
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2743?
CVE-2006-2743 has a medium severity level due to possible file upload and execution vulnerabilities.
2
How do I fix CVE-2006-2743?
To fix CVE-2006-2743, upgrade your Drupal installation to versions 4.6.7 or 4.7.1 or higher.
3
What is the impact of CVE-2006-2743 on my Drupal site?
CVE-2006-2743 can allow remote attackers to upload arbitrary files, potentially compromising your site's security.
4
What versions of Drupal are affected by CVE-2006-2743?
CVE-2006-2743 affects Drupal versions 4.6.0 to 4.6.6 and 4.7.0.
5
Can CVE-2006-2743 be exploited remotely?
Yes, CVE-2006-2743 can be exploited remotely, allowing attackers to execute arbitrary files on the server.