PT-2007-6940 · WordPress · Wordpress

Published 2007-11-19 · Updated 2024-02-09 · CVE-2007-6013

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wordpress versions 1.5 through 2.3.1

Description The issue allows attackers to bypass authentication by obtaining the MD5 hash from the user database and then generating the authentication cookie from that hash. This is possible because Wordpress uses cookie values based on the MD5 hash of a password MD5 hash.

Recommendations For versions 1.5 through 2.3.1, consider updating to a version that does not use MD5 hashes for cookie authentication, or apply alternative authentication mechanisms to mitigate the risk of exploitation. As a temporary workaround, consider restricting access to sensitive areas of the application until a more secure authentication method is implemented.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2007-6013

Affected Products

Wordpress

References · 18

• 🔥 http://trac.wordpress.org/ticket/5367 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6013 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00079.html · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-January/msg00098.html · Vendor Advisory
• http://secunia.com/advisories/28310 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3941 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2007-6013 · Vendor Advisory
• http://secunia.com/advisories/27714 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2007-6013 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2007-6013 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38578 · Note
• http://securityfocus.com/archive/1/483927/100/0/threaded · Note
• http://osvdb.org/40801 · Note
• http://securityreason.com/securityalert/3375 · Note
• http://securitytracker.com/id?1018980 · Note