• info
• discussion
• exploit
• solution
• references

Drupal Session Fixation Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.


Drupal Drupal 6.1

• Drupal SA-2008-044-6.2.patch
  http://drupal.org/files/sa-2008-044/SA-2008-044-6.2.patch

Drupal Drupal 6.0

• Drupal SA-2008-044-6.2.patch
  http://drupal.org/files/sa-2008-044/SA-2008-044-6.2.patch

Drupal Drupal 5.8

• Drupal SA-2008-046-5.8.patch
  http://drupal.org/files/sa-2008-046/SA-2008-046-5.8.patch

Drupal Drupal 6.2

• Drupal SA-2008-044-6.2.patch
  http://drupal.org/files/sa-2008-044/SA-2008-044-6.2.patch