CVE-2012-4470

Summary

The Listhandler module 6.x-1.x before 6.x-1.1 for Drupal does not properly check permissions when importing emails, which allows remote comment authors to bypass access restrictions and possibly have other unspecified impact.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.securityfocus.com/bid/54376
• http://www.openwall.com/lists/oss-security/2012/10/04/3
• http://drupal.org/node/1819780
• http://drupal.org/node/1679412

References

• http://www.securityfocus.com/bid/54376
• http://www.openwall.com/lists/oss-security/2012/10/04/3
• http://drupal.org/node/1819780
• http://drupal.org/node/1679412

• ←Previous
• Next→