PT-2013-3576 · WordPress · Wordpress

Ethicalhack3R · Published 2013-06-21 · Updated 2013-08-22 · CVE-2013-2173

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions WordPress version 3.5.1

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by providing a crafted value of a certain wp-postpass cookie when a password-protected post exists.

Recommendations For WordPress version 3.5.1, update to a newer version to mitigate the risk of CPU consumption denial of service attacks.

Exploit

Fix

DoS

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2013-2173

DSA-2718-1

MGASA-2013-0198

Affected Products

Wordpress

References · 21

• 🔥 https://vndh.net/note:wordpress-351-denial-service · Exploit
• https://security-tracker.debian.org/tracker/CVE-2013-2173 · Vendor Advisory
• http://debian.org/security/2013/dsa-2718 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2013-0198.html · Security Note
• https://cve.org/CVERecord?id=CVE-2013-2173 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2013-2173 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2013-0198 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-2173 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-2173 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-2173 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-2173 · Security Note
• https://github.com/wpscanteam/wpscan/issues/219 · Note
• https://bugs.mageia.org/show_bug.cgi?id=10596 · Note
• http://codex.wordpress.org/Version_3.5.2 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=976784 · Note