--- title: "CVE-2006-2831\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2006-2831?format=md keywords: index, follow --- # CVE-2006-2831 Publication date 6 June 2006 Last updated 17 July 2025 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote attackers to execute arbitrary code by uploading a file with multiple extensions, a variant of CVE-2006-2743. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | drupal | 9.10 karmic | Not in release | | 9.04 jaunty | Not in release | | 8.10 intrepid | Not in release | | 8.04 LTS hardy | Not in release | | 7.10 gutsy | Not in release | | 7.04 feisty | Ignored end of life, was needed | | 6.10 edgy | Ignored end of life, was needed | | 6.06 LTS dapper | Ignored end of life | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2831) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2006-2831) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2006-2831) * [Debian](https://security-tracker.debian.org/tracker/CVE-2006-2831) ### Other references *