CVE-2007-5595

Publication date 19 October 2007

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x before 4.7.8 and 5.x before 5.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Status

Package Ubuntu Release Status
drupal5 7.10 gutsy
Fixed 5.2-2ubuntu2.1
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release