CVE-2008-3742: Medium severity drupal vulnerability
Published Aug 27, 2008
·Updated
Unrestricted file upload vulnerability in the BlogAPI module in Drupal 5.x before 5.10 and 6.x before 6.4 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, which is not validated.
Affected Software
14 affected components
Drupal Drupal=5.4
Drupal Drupal=6.2
Drupal Drupal=5.2
Drupal Drupal=5.7
Drupal Drupal=5.0
Drupal Drupal=6.1
Drupal Drupal=5.6
Drupal Drupal=5.1
Drupal Drupal=5.5
Drupal Drupal=6.0
Drupal Drupal=5.9
Drupal Drupal=5.8
Drupal Drupal=5.3
Drupal Drupal=6.3
Event History
Aug 27, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3742?
CVE-2008-3742 is considered a critical severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2008-3742?
To fix CVE-2008-3742, upgrade to Drupal version 5.10 or higher and 6.4 or higher.
3
What versions of Drupal are affected by CVE-2008-3742?
CVE-2008-3742 affects Drupal versions 5.0 to 5.9 and 6.0 to 6.3.
4
Who can exploit CVE-2008-3742?
CVE-2008-3742 can be exploited by remote authenticated users who can upload files.
5
What is the impact of CVE-2008-3742?
The impact of CVE-2008-3742 is the ability for attackers to execute arbitrary code on the server by uploading malicious files.