Unrated severityNVD Advisory· Published Aug 6, 2009· Updated Apr 23, 2026
CVE-2008-6910
CVE-2008-6910
Description
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request.
Affected products
7cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:5.x-0.91:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:5.x-1.x-dev:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-0.11:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-0.12:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-0.9:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-1.x-dev:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- drupal.org/node/348295nvdPatchVendor Advisory
- www.securityfocus.com/bid/32894nvdPatch
- osvdb.org/50743nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/52441nvd
News mentions
0No linked articles in our index yet.