National Cyber Awareness System

Vulnerability Summary for CVE-2009-2334

Overview

wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstrated by the (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: VUPEN

Name: ADV-2009-1833

Type: Advisory; Patch Information

Hyperlink:http://www.vupen.com/english/advisories/2009/1833

External Source: BID

Name: 35584

Type: Patch Information; Exploit

Hyperlink:http://www.securityfocus.com/bid/35584

External Source: OSVDB

Name: 55715

Type: Patch Information

Hyperlink:http://www.osvdb.org/55715

External Source: OSVDB

Name: 55712

Type: Patch Information; Exploit

Hyperlink:http://www.osvdb.org/55712

External Source: FEDORA

Name: FEDORA-2009-7729

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html

External Source: FEDORA

Name: FEDORA-2009-7701

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html

External Source: FEDORA

Name: FEDORA-2009-8538

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html

External Source: FEDORA

Name: FEDORA-2009-8529

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html

External Source: BUGTRAQ

Name: 20090708 CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/504795/100/0/threaded

External Source: MILW0RM

Name: 9110

Hyperlink:http://www.milw0rm.com/exploits/9110

External Source: DEBIAN

Name: DSA-1871

Hyperlink:http://www.debian.org/security/2009/dsa-1871

External Source: CONFIRM

Name: http://wordpress.org/development/2009/07/wordpress-2-8-1/

Type: Advisory

Hyperlink:http://wordpress.org/development/2009/07/wordpress-2-8-1/

External Source: SECTRACK

Name: 1022528

Hyperlink:http://securitytracker.com/id?1022528

External Source: MISC

Name: http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked

Hyperlink:http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked