Unrated severityNVD Advisory· Published Aug 6, 2009· Updated Apr 23, 2026
CVE-2008-6909
CVE-2008-6909
Description
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not sign all required data in requests, which has unspecified impact, probably related to man-in-the-middle attacks that modify critical data and allow remote attackers to impersonate other users and gain privileges.
Affected products
7cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:5.x-0.91:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:5.x-1.x-dev:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-0.11:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-0.12:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-0.9:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-1.x-dev:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- drupal.org/node/348295nvdPatchVendor Advisory
- osvdb.org/50743nvdPatch
- www.securityfocus.com/bid/32894nvdPatch
- exchange.xforce.ibmcloud.com/vulnerabilities/47458nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/52438nvd
News mentions
0No linked articles in our index yet.