CVE

Id
18806  
CVE No.
CVE-2006-2702  
Status
Candidate  
Description
vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PC_REMOTE_ADDR HTTP header, which vars.php uses to redefine $_SERVER["REMOTE_ADDR"].  
Phase
Assigned (20060530)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
164795 18806 CVE-2006-2702 BUGTRAQ:20060525 Wordpress <=2.0.2 "cache" shell injection  View
164796 18806 CVE-2006-2702 URL:http://www.securityfocus.com/archive/1/archive/1/435039/100/0/threaded  View
164797 18806 CVE-2006-2702 MISC:http://retrogod.altervista.org/wordpress_202_xpl.html  View
164798 18806 CVE-2006-2702 GENTOO:GLSA-200606-08  View
164799 18806 CVE-2006-2702 URL:http://www.gentoo.org/security/en/glsa/glsa-200606-08.xml  View
164800 18806 CVE-2006-2702 VUPEN:ADV-2006-1992  View
164801 18806 CVE-2006-2702 URL:http://www.vupen.com/english/advisories/2006/1992  View
164802 18806 CVE-2006-2702 OSVDB:25935  View
164803 18806 CVE-2006-2702 URL:http://www.osvdb.org/25935  View
164804 18806 CVE-2006-2702 SECUNIA:20271  View
164805 18806 CVE-2006-2702 URL:http://secunia.com/advisories/20271  View
164806 18806 CVE-2006-2702 SECUNIA:20608  View
164807 18806 CVE-2006-2702 URL:http://secunia.com/advisories/20608  View
164808 18806 CVE-2006-2702 XF:wordpress-pcremoteaddr-ip-spoofing(26688)  View

Related JVN