WordPress Multiple Unspecified Security Vulnerabilities

Bugtraq ID:	19247
Class:	Unknown
CVE:	CVE-2006-3667
Remote:	Yes
Local:	No
Published:	Jul 31 2006 12:00AM
Updated:	Aug 11 2006 08:50PM
Credit:	These issues were disclosed by the vendor.
Vulnerable:	WordPress WordPress 2.0.3 WordPress WordPress 2.0.2 WordPress WordPress 2.0.1 WordPress WordPress 2.0 Gentoo Linux
Not Vulnerable:	WordPress WordPress 2.0.4

WordPress Multiple Unspecified Security Vulnerabilities

WordPress is prone to multiple unspecified security vulnerabilities.

Very little information is available on this issue; this BID will be updated as more information becomes available.

WordPress 2.03 and earlier are vulnerable to this issue.

The vendor has released an update.

One of these issues is related to plugins and may allow a remote user to bypass security restrictions. The impact of this will depend on the configuration of WordPress but may permit the execution of arbitrary PHP code.

WordPress Multiple Unspecified Security Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

WordPress Multiple Unspecified Security Vulnerabilities

Solution:
The vendor has released version 2.0.4 to address this issue.

Please refer to the references for more information.

WordPress Multiple Unspecified Security Vulnerabilities

References:

• WordPress Home Page (WordPress)