PT-2013-3576 · WordPress · Wordpress

Ethicalhack3R · Publicado 2013-06-21 · Atualizado 2013-08-22 · CVE-2013-2173

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions WordPress version 3.5.1

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by providing a crafted value of a certain wp-postpass cookie when a password-protected post exists.

Recommendations For WordPress version 3.5.1, update to a newer version to mitigate the risk of CPU consumption denial of service attacks.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2013-2173

DSA-2718-1

MGASA-2013-0198

Produtos afetados

Wordpress

Referências · 21

• 🔥 https://vndh.net/note:wordpress-351-denial-service · Exploit
• https://github.com/wpscanteam/wpscan/issues/219 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=10596 · Nota
• http://codex.wordpress.org/Version_3.5.2 · Nota
• https://security-tracker.debian.org/tracker/CVE-2013-2173 · Aviso do Fabricante
• http://debian.org/security/2013/dsa-2718 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=976784 · Nota
• http://openwall.com/lists/oss-security/2013/06/12 · Nota
• https://advisories.mageia.org/MGASA-2013-0198.html · Nota de Segurança
• http://wordpress.org/news/2013/06/wordpress-3-5-2 · Nota
• https://cve.org/CVERecord?id=CVE-2013-2173 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2173 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2173 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2013-0198 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2013-06/0052.html · Nota