WordPress Trashed Posts Information Disclosure Vulnerability

Bugtraq ID:	38368
Class:	Access Validation Error
CVE:	CVE-2010-0682
Remote:	Yes
Local:	No
Published:	Feb 13 2010 12:00AM
Updated:	Feb 23 2010 11:51PM
Credit:	Thomas Mackenzie
Vulnerable:	WordPress WordPress MU 2.8.1 WordPress WordPress MU 2.7.1 WordPress WordPress MU 1.3.1 WordPress WordPress MU 1.3 WordPress WordPress MU 1.2.3 WordPress WordPress MU 1.2.2 WordPress WordPress MU 2.8 WordPress WordPress MU 2.7 WordPress WordPress MU 2.6 WordPress Wordpress (B2) 0.6.2 .1 WordPress Wordpress (B2) 0.6.2 WordPress WordPress 2.9.1 WordPress WordPress 2.8.6 WordPress WordPress 2.8.5 WordPress WordPress 2.8.4 WordPress WordPress 2.8.3 WordPress WordPress 2.8.2 WordPress WordPress 2.8.1 WordPress WordPress 2.6.5 WordPress WordPress 2.6.2 WordPress WordPress 2.6.1 WordPress WordPress 2.5.1 WordPress WordPress 2.3.3 WordPress WordPress 2.3.2 WordPress WordPress 2.3.1 WordPress WordPress 2.2.3 WordPress WordPress 2.2.2 WordPress WordPress 2.2.1 WordPress WordPress 2.2.1 WordPress WordPress 2.1.3 WordPress WordPress 2.1.3 WordPress WordPress 2.1.2 WordPress WordPress 2.1.1 WordPress WordPress 2.0.11 WordPress WordPress 2.0.10 WordPress WordPress 2.0.7 WordPress WordPress 2.0.6 WordPress WordPress 2.0.5 WordPress WordPress 2.0.4 WordPress WordPress 2.0.3 WordPress WordPress 2.0.2 WordPress WordPress 2.0.1 WordPress WordPress 2.0 WordPress WordPress 1.5.2 WordPress WordPress 1.5.1 .3 WordPress WordPress 1.5.1 .2 WordPress WordPress 1.5.1 WordPress WordPress 1.5 WordPress WordPress 1.3.1 WordPress WordPress 1.2.2 WordPress WordPress 1.2.1 + Gentoo Linux WordPress WordPress 1.2 + Gentoo Linux 1.4 + Gentoo Linux WordPress WordPress 0.71 WordPress WordPress 0.7 WordPress WordPress 2.9 WordPress WordPress 2.8 WordPress WordPress 2.6 WordPress WordPress 2.5 WordPress WordPress 2.3 WordPress WordPress 2.2 Revision 5003 WordPress WordPress 2.2 Revision 5002 WordPress WordPress 2.2 WordPress WordPress 2.1.3-RC2 WordPress WordPress 2.1.3-RC1 WordPress WordPress 2.1 WordPress WordPress 2.0.10-RC2 WordPress WordPress 2.0.10-RC1
Not Vulnerable:	WordPress WordPress 2.9.2

WordPress Trashed Posts Information Disclosure Vulnerability

WordPress is prone to an information-disclosure vulnerability because it fails to properly restrict access to trashed posts.

An attacker can exploit this vulnerability to view other authors' trashed posts, which may aid in further attacks.

Versions prior to WordPress 2.9.2 are vulnerable.

WordPress Trashed Posts Information Disclosure Vulnerability

Attackers can exploit this issue via a browser.

The following exploit code is available:

• /data/vulnerabilities/exploits/38368.py

WordPress Trashed Posts Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for more information.


WordPress WordPress 2.2.1

• WordPress latest.tar.gz
  http://wordpress.org/latest.tar.gz

WordPress Trashed Posts Information Disclosure Vulnerability

References:

• WordPress >= 2.9 Failure to Restrict URL Access (Thomas Mackenzie)
  
• WordPress 2.9.2 (WordPress)
  
• Wordpress church_admin Plugin "id" Cross-Site Scripting Vulnerability (Sammy Forgit)