5.1

CVE-2008-4106

WordPress Core < 2.6.2 - Arbitrary User Password Reset

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the user_login column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's password to a random value by registering a similar username and then requesting a password reset, related to a "SQL column truncation vulnerability." NOTE: the attacker can discover the random password by also exploiting CVE-2008-4107.
Mögliche Gegenmaßnahme
WordPress: Update to version 2.6.2, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wordpress ≫ Wordpress Version <= 2.6.1
Wordpress ≫ Wordpress Version 0.71-gold
Wordpress ≫ Wordpress Version 1.0-platinum
Wordpress ≫ Wordpress Version 1.0.1-miles
Wordpress ≫ Wordpress Version 1.0.2-blakey
Wordpress ≫ Wordpress Version 1.2-delta
Wordpress ≫ Wordpress Version 1.2-mingus
Wordpress ≫ Wordpress Version 1.2.1
Wordpress ≫ Wordpress Version 1.2.2
Wordpress ≫ Wordpress Version 1.5-strayhorn
Wordpress ≫ Wordpress Version 1.5.1.1
Wordpress ≫ Wordpress Version 1.5.1.2
Wordpress ≫ Wordpress Version 1.5.1.3
Wordpress ≫ Wordpress Version 1.5.2
Wordpress ≫ Wordpress Version 2.0
Wordpress ≫ Wordpress Version 2.0.1
Wordpress ≫ Wordpress Version 2.0.4
Wordpress ≫ Wordpress Version 2.0.5
Wordpress ≫ Wordpress Version 2.0.6
Wordpress ≫ Wordpress Version 2.0.7
Wordpress ≫ Wordpress Version 2.0.9
Wordpress ≫ Wordpress Version 2.0.10
Wordpress ≫ Wordpress Version 2.0.11
Wordpress ≫ Wordpress Version 2.1
Wordpress ≫ Wordpress Version 2.1.1
Wordpress ≫ Wordpress Version 2.1.2
Wordpress ≫ Wordpress Version 2.1.3
Wordpress ≫ Wordpress Version 2.2
Wordpress ≫ Wordpress Version 2.2.1
Wordpress ≫ Wordpress Version 2.2.2
Wordpress ≫ Wordpress Version 2.2.3
Wordpress ≫ Wordpress Version 2.5
Wordpress ≫ Wordpress Version 2.5.1
Wordpress ≫ Wordpress Version 2.6
Weitere Schwachstelleninformationen
SystemWordPress Core
≫
Produkt WordPress
Version *-2.6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.48% 0.917
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.1 4.9 6.4
AV:N/AC:H/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.debian.org/security/2009/dsa-1871
http://marc.info/?l=oss-security&m=122152830017099&w=2
http://secunia.com/advisories/31737
http://secunia.com/advisories/31870
Vendor Advisory
http://securityreason.com/securityalert/4272
http://securitytracker.com/id?1020869
http://wordpress.org/development/2008/09/wordpress-262/
Patch
http://www.openwall.com/lists/oss-security/2008/09/11/6
http://www.securityfocus.com/archive/1/496287/100/0/threaded
http://www.securityfocus.com/bid/31068
http://www.sektioneins.de/advisories/SE-2008-05.txt
http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/
http://www.vupen.com/english/advisories/2008/2553
https://www.exploit-db.com/exploits/6397
https://www.exploit-db.com/exploits/6421
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00607.html
https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00629.html
https://www.wordfence.com/threat-intel/vulnerabilities/id/354a5b89-8845-4486-8cc5-7339a6a107c0
Third Party Advisory