CVE-2010-3092
Severity Score
5.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The upload module in Drupal 5.x before 5.23 and 6.x before 6.18 does not properly support case-insensitive filename handling in a database configuration, which allows remote authenticated users to bypass the intended restrictions on downloading a file by uploading a different file with a similar name.
El módulo de carga en Drupal v5.x anterior a v5.23 y v6.x anterior a v6.18 no soporta apropiadamente la manipulación de nombres de archivos insensibles a mayúsculas y minúsculas en la configuración de la base de datos, lo que permite a usuarios autenticados remotamente evitar restricciones pretendidas en la descarga de un fichero mediante la carga de un fichero diferente con un nombre similar.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-08-20 CVE Reserved
- 2010-09-21 CVE Published
- 2024-09-16 CVE Updated
- 2024-11-08 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=oss-security&m=128418560705305&w=2 | Mailing List | |
| http://marc.info/?l=oss-security&m=128440896914512&w=2 | Mailing List | |
| http://www.securityfocus.com/bid/42391 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://drupal.org/node/880476 | 2010-09-22 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2010/dsa-2113 | 2010-09-22 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | beta1 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | beta2 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | dev |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | rc1 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.0 Search vendor "Drupal" for product "Drupal" and version "5.0" | rc2 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.1 Search vendor "Drupal" for product "Drupal" and version "5.1" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.2 Search vendor "Drupal" for product "Drupal" and version "5.2" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.3 Search vendor "Drupal" for product "Drupal" and version "5.3" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.4 Search vendor "Drupal" for product "Drupal" and version "5.4" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.5 Search vendor "Drupal" for product "Drupal" and version "5.5" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.6 Search vendor "Drupal" for product "Drupal" and version "5.6" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.7 Search vendor "Drupal" for product "Drupal" and version "5.7" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.8 Search vendor "Drupal" for product "Drupal" and version "5.8" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.9 Search vendor "Drupal" for product "Drupal" and version "5.9" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.10 Search vendor "Drupal" for product "Drupal" and version "5.10" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.11 Search vendor "Drupal" for product "Drupal" and version "5.11" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.12 Search vendor "Drupal" for product "Drupal" and version "5.12" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.13 Search vendor "Drupal" for product "Drupal" and version "5.13" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.14 Search vendor "Drupal" for product "Drupal" and version "5.14" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.15 Search vendor "Drupal" for product "Drupal" and version "5.15" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.16 Search vendor "Drupal" for product "Drupal" and version "5.16" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.17 Search vendor "Drupal" for product "Drupal" and version "5.17" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.18 Search vendor "Drupal" for product "Drupal" and version "5.18" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.19 Search vendor "Drupal" for product "Drupal" and version "5.19" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.20 Search vendor "Drupal" for product "Drupal" and version "5.20" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.21 Search vendor "Drupal" for product "Drupal" and version "5.21" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 5.22 Search vendor "Drupal" for product "Drupal" and version "5.22" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | beta1 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | beta2 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | beta3 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | beta4 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | dev |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | rc1 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | rc2 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | rc3 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.0 Search vendor "Drupal" for product "Drupal" and version "6.0" | rc4 |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.1 Search vendor "Drupal" for product "Drupal" and version "6.1" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.2 Search vendor "Drupal" for product "Drupal" and version "6.2" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.3 Search vendor "Drupal" for product "Drupal" and version "6.3" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.4 Search vendor "Drupal" for product "Drupal" and version "6.4" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.5 Search vendor "Drupal" for product "Drupal" and version "6.5" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.6 Search vendor "Drupal" for product "Drupal" and version "6.6" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.7 Search vendor "Drupal" for product "Drupal" and version "6.7" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.8 Search vendor "Drupal" for product "Drupal" and version "6.8" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.9 Search vendor "Drupal" for product "Drupal" and version "6.9" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.10 Search vendor "Drupal" for product "Drupal" and version "6.10" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.11 Search vendor "Drupal" for product "Drupal" and version "6.11" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.12 Search vendor "Drupal" for product "Drupal" and version "6.12" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.13 Search vendor "Drupal" for product "Drupal" and version "6.13" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.14 Search vendor "Drupal" for product "Drupal" and version "6.14" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.15 Search vendor "Drupal" for product "Drupal" and version "6.15" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.16 Search vendor "Drupal" for product "Drupal" and version "6.16" | - |
Affected
| ||||||
| Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | 6.17 Search vendor "Drupal" for product "Drupal" and version "6.17" | - |
Affected
| ||||||