* Advisory ID: DRUPAL-SA-CONTRIB-2009-056 * Project: Node2Node, Node Browser, Subdomain Manager, Quota by role, Rest API (third-party modules) * Version: 5.x, 6.x * Date: 2009 Sept 9 * Security risk: Critical * Exploitable from: Remote * Vulnerability: Multiple vulnerabilities

-------- DESCRIPTION ---------------------------------------------------------

Multiple vulnerabilities have been found in the following modules which have been abandoned. Their releases have been unpublished and it is recommended that they be disabled and un-installed if in use. -------- MODULES -------------------------------------------------------------

* Node2Node [1] * Node Browser [2] * Subdomain Manager [3] * Quota by role [4] * Rest API [5]

Drupal core is not affected. If you do not use any of these contributed modules, there is nothing you need to do. -------- SOLUTION ------------------------------------------------------------

There is no solution available. It is recommended that you disable any of the vulnerable modules if they are in use on your site. -------- CONTACT -------------------------------------------------------------

The security contact for Drupal can be reached at security at drupal.org or via the form at http://drupal.org/contact.

[1] http://drupal.org/project/node2node [2] http://drupal.org/project/node_browser [3] http://drupal.org/project/subdomain_manager [4] http://drupal.org/project/quota_by_role [5] http://drupal.org/project/restapi