National Cyber-Alert System

Vulnerability Summary for CVE-2007-1277

Overview

WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to wp-includes/feed.php, and (2) an untrusted passthru call in the iz parameter to wp-includes/theme.php.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Solution

This vulnerability is addressed in the following product update: http://wordpress.org/development/2007/03/upgrade-212/}

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#641456

Name: VU#641456

Hyperlink:http://www.kb.cert.org/vuls/id/641456

US-CERT Vulnerability Note: VU#214480

Name: VU#214480

Hyperlink:http://www.kb.cert.org/vuls/id/214480

External Source: XF

Name: wordpress-theme-command-execution(32807)

Hyperlink:http://xforce.iss.net/xforce/xfdb/32807

External Source: XF

Name: wordpress-feed-code-execution(32804)

Hyperlink:http://xforce.iss.net/xforce/xfdb/32804

External Source: BID

Name: 22797

Hyperlink:http://www.securityfocus.com/bid/22797

External Source: BUGTRAQ

Name: 20070303 WordPress source code compromised to enable remote code execution

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/461794/100/0/threaded

External Source: VUPEN

Name: ADV-2007-0812

Type: Advisory

Hyperlink:http://www.frsirt.com/english/advisories/2007/0812

External Source: CONFIRM

Name: http://wordpress.org/development/2007/03/upgrade-212/

Type: Advisory

Hyperlink:http://wordpress.org/development/2007/03/upgrade-212/

External Source: SECUNIA

Name: 24374

Type: Advisory

Hyperlink:http://secunia.com/advisories/24374

External Source: MISC

Name: http://ifsec.blogspot.com/2007/03/wordpress-code-compromised-to-enable.html

Hyperlink:http://ifsec.blogspot.com/2007/03/wordpress-code-compromised-to-enable.html