PT-2006-6664 · WordPress · Wordpress

Adapter + 1 · Published 2006-11-21 · Updated 2025-04-03 · CVE-2006-6017

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 2.0.5

Description The issue allows remote authenticated users to cause a denial of service, resulting in an application crash. This occurs when a string representation of a serialized object is not properly stored in a profile. The object can be either malformed or large, triggering automatic unserialization for display, which leads to the denial of service.

Recommendations For versions prior to 2.0.5, update to version 2.0.5 or later to resolve the issue.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2006-6017

Affected Products

Wordpress

References · 9

• https://security-tracker.debian.org/tracker/CVE-2006-6017 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-6017 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6017 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200611-10.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-6017 · Vendor Advisory
• https://t.me/cvenotify/117588 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6017 · Note
• http://bugs.gentoo.org/show_bug.cgi?id=153303 · Note
• http://trac.wordpress.org/ticket/2591 · Note