CVE-2007-0124

Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist.

Link	Resource
http://drupal.org/node/104238	Patch Vendor Advisory
http://www.securityfocus.com/bid/21895	Exploit Patch
http://secunia.com/advisories/23586	Patch Vendor Advisory
http://securityreason.com/securityalert/2115
http://osvdb.org/32131
http://www.vupen.com/english/advisories/2007/0051
http://www.securityfocus.com/archive/1/456056/100/0/threaded

Configuration 1

cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.10:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.9:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.7.3:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.7:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.7.4:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*

---

Published : 2007-01-09 02:28

Updated : 2018-10-16 04:31

---

NVD link : CVE-2007-0124

Mitre link : CVE-2007-0124

No products.

NVD-CWE-Other