ID de Prueba:	1.3.6.1.4.1.25623.1.0.105934
Categoría:	Web application abuses
Título:	Drupal Password Hashing Denial of Service Vulnerability
Resumen:	A vulnerability in the password hashing API of Drupal 7 can lead; to a DoS.
Descripción:	Summary: A vulnerability in the password hashing API of Drupal 7 can lead to a DoS. Vulnerability Insight: Drupal 7 includes a password hashing API to ensure that user supplied passwords are not stored in plain text. An attacker can send specially crafted requests resulting in CPU and memory exhaustion. Vulnerability Impact: An unauthenticated attacker can cause a denial of service. Affected Software/OS: Drupal 7 before 7.34. Solution: Upgrade to Drupal 7.34 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-9016 Debian Security Information: DSA-3075 (Google Search) http://www.debian.org/security/2014/dsa-3075 https://www.drupal.org/node/2378367 http://www.openwall.com/lists/oss-security/2014/11/20/3 http://www.openwall.com/lists/oss-security/2014/11/20/21 http://www.openwall.com/lists/oss-security/2014/11/21/1 http://secunia.com/advisories/59164 http://secunia.com/advisories/59814
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.