CVE

Id
26996  
CVE No.
CVE-2007-3639  
Status
Candidate  
Description
WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via (1) the _wp_http_referer parameter to wp-pass.php, related to the wp_get_referer function in wp-includes/functions.php; and possibly other vectors related to (2) wp-includes/pluggable.php and (3) the wp_nonce_ays function in wp-includes/functions.php.  
Phase
Assigned (20070709)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
275511 26996 CVE-2007-3639 BUGTRAQ:20070705 Redirection Vulnerability in wp-pass.php, WordPress 2.2.1  View
275512 26996 CVE-2007-3639 URL:http://www.securityfocus.com/archive/1/archive/1/472885/100/0/threaded  View
275513 26996 CVE-2007-3639 DEBIAN:DSA-1564  View
275514 26996 CVE-2007-3639 URL:http://www.debian.org/security/2008/dsa-1564  View
275515 26996 CVE-2007-3639 OSVDB:40802  View
275516 26996 CVE-2007-3639 URL:http://osvdb.org/40802  View
275517 26996 CVE-2007-3639 SECUNIA:30013  View
275518 26996 CVE-2007-3639 URL:http://secunia.com/advisories/30013  View
275519 26996 CVE-2007-3639 SREASON:2869  View
275520 26996 CVE-2007-3639 URL:http://securityreason.com/securityalert/2869  View
275521 26996 CVE-2007-3639 XF:wordpress-wppass-security-bypass(35272)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53611 JVNDB-2007-002303 libarchive の archive_read_support_format_tar.c におけるサービス運用妨害 (DoS) の脆弱性 libarchive の archive_read_support_format_tar.c には、不正な形式の pax 拡張子のヘッダを処理している際、特定のバッファの長さを適切に算出しないため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-3641 26996 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002303.html  View