WordPress Prior to Version 2.8.3 'wp-admin' Multiple Security Bypass Vulnerabilities
BID:35935
Info
WordPress Prior to Version 2.8.3 'wp-admin' Multiple Security Bypass Vulnerabilities
| Bugtraq ID: | 35935 |
| Class: | Access Validation Error |
| CVE: |
CVE-2009-2853 CVE-2009-2854 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 04 2009 12:00AM |
| Updated: | May 07 2015 05:06PM |
| Credit: | WordPress |
| Vulnerable: |
WordPress WordPress 2.8.2 WordPress WordPress 2.8.1 WordPress WordPress 2.6.5 WordPress WordPress 2.6.2 WordPress WordPress 2.6.1 WordPress WordPress 2.5.1 WordPress WordPress 2.3.3 WordPress WordPress 2.3.2 WordPress WordPress 2.3.1 WordPress WordPress 2.2.3 WordPress WordPress 2.2.2 WordPress WordPress 2.2.1 WordPress WordPress 2.1.3 WordPress WordPress 2.1.2 WordPress WordPress 2.1.1 WordPress WordPress 2.0.11 WordPress WordPress 2.0.10 WordPress WordPress 2.0.7 WordPress WordPress 2.0.6 WordPress WordPress 2.0.5 WordPress WordPress 2.0.4 WordPress WordPress 2.0.3 WordPress WordPress 2.0.2 WordPress WordPress 2.0.1 WordPress WordPress 2.0 WordPress WordPress 2.8 WordPress WordPress 2.6 WordPress WordPress 2.5 WordPress WordPress 2.3 WordPress WordPress 2.2 Revision 5003 WordPress WordPress 2.2 Revision 5002 WordPress WordPress 2.2 WordPress WordPress 2.1.3-RC2 WordPress WordPress 2.1.3-RC1 WordPress WordPress 2.1 WordPress WordPress 2.0.10-RC2 WordPress WordPress 2.0.10-RC1 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: |
WordPress WordPress 2.8.3 |
Discussion
WordPress Prior to Version 2.8.3 'wp-admin' Multiple Security Bypass Vulnerabilities
WordPress is prone to multiple security-bypass vulnerabilities.
Authenticated attackers may exploit these issues to gain access to administrative functions, which may allow them to obtain sensitive information or elevate privileges; other attacks may also be possible.
Versions prior to WordPress 2.8.3 are vulnerable.
WordPress is prone to multiple security-bypass vulnerabilities.
Authenticated attackers may exploit these issues to gain access to administrative functions, which may allow them to obtain sensitive information or elevate privileges; other attacks may also be possible.
Versions prior to WordPress 2.8.3 are vulnerable.
Exploit / POC
WordPress Prior to Version 2.8.3 'wp-admin' Multiple Security Bypass Vulnerabilities
An attacker can exploit these issues via a browser.
An attacker can exploit these issues via a browser.
Solution / Fix
WordPress Prior to Version 2.8.3 'wp-admin' Multiple Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references for details.
Debian Linux 5.0 ia-64
WordPress WordPress 2.1
WordPress WordPress 2.8
Debian Linux 5.0 alpha
Debian Linux 5.0 mipsel
Debian Linux 4.0 amd64
WordPress WordPress 2.2
WordPress WordPress 2.6
Debian Linux 4.0 ia-32
Debian Linux 4.0 hppa
WordPress WordPress 2.0.10-RC1
WordPress WordPress 2.3
Debian Linux 4.0 armel
WordPress WordPress 2.0.10-RC2
Debian Linux 5.0 armel
Debian Linux 5.0
Debian Linux 4.0 mipsel
Debian Linux 5.0 mips
Debian Linux 4.0 ia-64
Debian Linux 4.0 mips
Debian Linux 5.0 sparc
Debian Linux 4.0 arm
WordPress WordPress 2.5
Debian Linux 4.0 powerpc
Debian Linux 4.0 m68k
Debian Linux 5.0 ia-32
Debian Linux 5.0 s/390
WordPress WordPress 2.1.3-RC1
Debian Linux 5.0 hppa
Debian Linux 4.0 sparc
Debian Linux 4.0 s/390
Debian Linux 5.0 m68k
WordPress WordPress 2.2 Revision 5003
Debian Linux 5.0 arm
Debian Linux 4.0 alpha
WordPress WordPress 2.2 Revision 5002
Debian Linux 4.0
Debian Linux 5.0 amd64
WordPress WordPress 2.1.3-RC2
Debian Linux 5.0 powerpc
WordPress WordPress 2.0
WordPress WordPress 2.0.1
WordPress WordPress 2.0.10
WordPress WordPress 2.0.11
WordPress WordPress 2.0.2
WordPress WordPress 2.0.3
WordPress WordPress 2.0.4
WordPress WordPress 2.0.5
WordPress WordPress 2.0.6
WordPress WordPress 2.0.7
WordPress WordPress 2.1.1
WordPress WordPress 2.1.2
WordPress WordPress 2.1.3
WordPress WordPress 2.2.1
WordPress WordPress 2.2.2
WordPress WordPress 2.2.3
WordPress WordPress 2.3.1
WordPress WordPress 2.3.2
WordPress WordPress 2.3.3
WordPress WordPress 2.5.1
WordPress WordPress 2.6.1
WordPress WordPress 2.6.2
WordPress WordPress 2.6.5
Solution:
Updates are available. Please see the references for details.
Debian Linux 5.0 ia-64
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
WordPress WordPress 2.1
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.8
-
WordPress latest.zip
http://wordpress.org/latest.zip
Debian Linux 5.0 alpha
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
Debian Linux 5.0 mipsel
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
Debian Linux 4.0 amd64
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
WordPress WordPress 2.2
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.6
-
WordPress latest.zip
http://wordpress.org/latest.zip
Debian Linux 4.0 ia-32
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
Debian Linux 4.0 hppa
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
WordPress WordPress 2.0.10-RC1
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.3
-
WordPress latest.zip
http://wordpress.org/latest.zip
Debian Linux 4.0 armel
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
WordPress WordPress 2.0.10-RC2
-
WordPress latest.zip
http://wordpress.org/latest.zip
Debian Linux 5.0 armel
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
Debian Linux 5.0
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
Debian Linux 4.0 mipsel
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
Debian Linux 5.0 mips
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
Debian Linux 4.0 ia-64
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
Debian Linux 4.0 mips
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
Debian Linux 5.0 sparc
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
Debian Linux 4.0 arm
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
WordPress WordPress 2.5
-
WordPress latest.zip
http://wordpress.org/latest.zip
Debian Linux 4.0 powerpc
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
Debian Linux 4.0 m68k
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
Debian Linux 5.0 ia-32
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
Debian Linux 5.0 s/390
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
WordPress WordPress 2.1.3-RC1
-
WordPress latest.zip
http://wordpress.org/latest.zip
Debian Linux 5.0 hppa
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
Debian Linux 4.0 sparc
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
Debian Linux 4.0 s/390
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
Debian Linux 5.0 m68k
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
WordPress WordPress 2.2 Revision 5003
-
WordPress latest.zip
http://wordpress.org/latest.zip
Debian Linux 5.0 arm
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
Debian Linux 4.0 alpha
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
WordPress WordPress 2.2 Revision 5002
-
WordPress latest.zip
http://wordpress.org/latest.zip
Debian Linux 4.0
-
Debian wordpress_2.0.10-1etch4_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb
Debian Linux 5.0 amd64
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
WordPress WordPress 2.1.3-RC2
-
WordPress latest.zip
http://wordpress.org/latest.zip
Debian Linux 5.0 powerpc
-
Debian wordpress_2.5.1-11+lenny1_all.deb
http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb
WordPress WordPress 2.0
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.0.1
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.0.10
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.0.11
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.0.2
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.0.3
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.0.4
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.0.5
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.0.6
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.0.7
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.1.1
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.1.2
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.1.3
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.2.1
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.2.2
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.2.3
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.3.1
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.3.2
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.3.3
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.5.1
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.6.1
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.6.2
-
WordPress latest.zip
http://wordpress.org/latest.zip
WordPress WordPress 2.6.5
-
WordPress latest.zip
http://wordpress.org/latest.zip
References
WordPress Prior to Version 2.8.3 'wp-admin' Multiple Security Bypass Vulnerabilities
References:
References:
- Changeset 11765 More cap checks, for 2.8 (azaozz)
- Changeset 11766 Add some CYA cap checks. (ryan)
- Changeset 11769 Stop direct loading of files in wp-admin that should only be inc (azaozz)
- CVE request: Wordpress (Alex Legler)
- WordPress 2.8.3 Security Release (WordPress)
- Wordpress church_admin Plugin "id" Cross-Site Scripting Vulnerability (Sammy Forgit)