CVE-2006-2831: High severity Drupal Drupal vulnerability
Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote attackers to execute arbitrary code by uploading a file with multiple extensions, a variant of CVE-2006-2743.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2831?
CVE-2006-2831 is considered to have a high severity due to the potential for remote code execution.
How do I fix CVE-2006-2831?
To fix CVE-2006-2831, you should upgrade to Drupal version 4.6.8 or 4.7.2 or later.
What versions of Drupal are affected by CVE-2006-2831?
CVE-2006-2831 affects Drupal versions 4.6.x before 4.6.8 and 4.7.x before 4.7.2.
Can CVE-2006-2831 be exploited in all server configurations?
CVE-2006-2831 can be exploited when certain Apache configurations, such as disabled FileInfo overrides, are in place.
What type of attack does CVE-2006-2831 facilitate?
CVE-2006-2831 facilitates remote code execution attacks through the uploading of files with multiple extensions.