5

CVE-2006-2702

Exploit

WordPress Core < 2.0.3 - IP Address Spoofing

vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PC_REMOTE_ADDR HTTP header, which vars.php uses to redefine $_SERVER['REMOTE_ADDR'].
Mögliche Gegenmaßnahme
WordPress: Update to version 2.0.3, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wordpress ≫ Wordpress Version2.0.2
Weitere Schwachstelleninformationen
SystemWordPress Core
≫
Produkt WordPress
Version *-2.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.92% 0.853
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://retrogod.altervista.org/wordpress_202_xpl.html
Exploit
http://secunia.com/advisories/20271
Vendor Advisory
Exploit
http://secunia.com/advisories/20608
http://www.gentoo.org/security/en/glsa/glsa-200606-08.xml
http://www.securityfocus.com/archive/1/435039/100/0/threaded
http://www.vupen.com/english/advisories/2006/1992
http://www.osvdb.org/25935
https://exchange.xforce.ibmcloud.com/vulnerabilities/26688
https://www.wordfence.com/threat-intel/vulnerabilities/id/71b521b5-acb5-4439-90f8-7d341291d583
Third Party Advisory