9.3

CVE-2008-4769

Exploit

WordPress Core <= 2.3.3 - Directory Traversal

Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and earlier, and 2.5, allows remote attackers to include and possibly execute arbitrary PHP files via the cat parameter in index.php.  NOTE: some of these details are obtained from third party information.
Mögliche Gegenmaßnahme
WordPress: Update to version 2.5.1, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wordpress ≫ Wordpress Version <= 2.3.3
Wordpress ≫ Wordpress Version 0.6.2
Wordpress ≫ Wordpress Version 0.6.2 Update beta_2
Wordpress ≫ Wordpress Version 0.6.2.1
Wordpress ≫ Wordpress Version 0.6.2.1 Update beta_2
Wordpress ≫ Wordpress Version 0.7
Wordpress ≫ Wordpress Version 0.71
Wordpress ≫ Wordpress Version 0.71-gold
Wordpress ≫ Wordpress Version 0.72
Wordpress ≫ Wordpress Version 0.72 Update beta1
Wordpress ≫ Wordpress Version 0.72 Update beta2
Wordpress ≫ Wordpress Version 0.72 Update rc1
Wordpress ≫ Wordpress Version 0.711
Wordpress ≫ Wordpress Version 1.0
Wordpress ≫ Wordpress Version 1.0-platinum
Wordpress ≫ Wordpress Version 1.0.1
Wordpress ≫ Wordpress Version 1.0.1-miles
Wordpress ≫ Wordpress Version 1.0.2
Wordpress ≫ Wordpress Version 1.0.2-blakey
Wordpress ≫ Wordpress Version 1.2
Wordpress ≫ Wordpress Version 1.2 Update beta
Wordpress ≫ Wordpress Version 1.2-delta
Wordpress ≫ Wordpress Version 1.2-mingus
Wordpress ≫ Wordpress Version 1.2.1
Wordpress ≫ Wordpress Version 1.2.2
Wordpress ≫ Wordpress Version 1.3.1
Wordpress ≫ Wordpress Version 1.4
Wordpress ≫ Wordpress Version 1.5
Wordpress ≫ Wordpress Version 1.5-strayhorn
Wordpress ≫ Wordpress Version 1.5.1
Wordpress ≫ Wordpress Version 1.5.1.1
Wordpress ≫ Wordpress Version 1.5.1.2
Wordpress ≫ Wordpress Version 1.5.1.3
Wordpress ≫ Wordpress Version 1.5.2
Wordpress ≫ Wordpress Version 1.6
Wordpress ≫ Wordpress Version 2.0
Wordpress ≫ Wordpress Version 2.0.1
Wordpress ≫ Wordpress Version 2.0.2
Wordpress ≫ Wordpress Version 2.0.3
Wordpress ≫ Wordpress Version 2.0.4
Wordpress ≫ Wordpress Version 2.0.5
Wordpress ≫ Wordpress Version 2.0.6
Wordpress ≫ Wordpress Version 2.0.7
Wordpress ≫ Wordpress Version 2.0.8
Wordpress ≫ Wordpress Version 2.0.9
Wordpress ≫ Wordpress Version 2.0.10
Wordpress ≫ Wordpress Version 2.0.10_rc1
Wordpress ≫ Wordpress Version 2.0.10_rc2
Wordpress ≫ Wordpress Version 2.0.11
Wordpress ≫ Wordpress Version 2.1
Wordpress ≫ Wordpress Version 2.1 Update alpha_3
Wordpress ≫ Wordpress Version 2.1.1
Wordpress ≫ Wordpress Version 2.1.2
Wordpress ≫ Wordpress Version 2.1.3
Wordpress ≫ Wordpress Version 2.1.3_rc1
Wordpress ≫ Wordpress Version 2.1.3_rc2
Wordpress ≫ Wordpress Version 2.2
Wordpress ≫ Wordpress Version 2.2.0
Wordpress ≫ Wordpress Version 2.2.1
Wordpress ≫ Wordpress Version 2.2.2
Wordpress ≫ Wordpress Version 2.2.3
Wordpress ≫ Wordpress Version 2.2_revision5002
Wordpress ≫ Wordpress Version 2.2_revision5003
Wordpress ≫ Wordpress Version 2.3
Wordpress ≫ Wordpress Version 2.3.1
Wordpress ≫ Wordpress Version 2.3.1 Update rc1
Wordpress ≫ Wordpress Version 2.3.2
Wordpress ≫ Wordpress Version 2.5
Weitere Schwachstelleninformationen
SystemWordPress Core
≫
Produkt WordPress
Version *-2.3.3
Version 2.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.97% 0.946
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://www.debian.org/security/2009/dsa-1871
http://secunia.com/advisories/29949
Vendor Advisory
http://trac.wordpress.org/changeset/7586
http://www.juniper.fi/security/auto/vulnerabilities/vuln28845.html
http://www.securityfocus.com/bid/28845
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41920
https://www.wordfence.com/threat-intel/vulnerabilities/id/38b27ee7-0e92-47ad-89f8-1a3c8d5c9442
Third Party Advisory