CVE

Id
29370  
CVE No.
CVE-2007-6013  
Status
Candidate  
Description
Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from that hash.  
Phase
Assigned (20071119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
308721 29370 CVE-2007-6013 BUGTRAQ:20071119 Wordpress Cookie Authentication Vulnerability  View
308722 29370 CVE-2007-6013 URL:http://www.securityfocus.com/archive/1/archive/1/483927/100/0/threaded  View
308723 29370 CVE-2007-6013 FULLDISC:20071119 Wordpress Cookie Authentication Vulnerability  View
308724 29370 CVE-2007-6013 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/058576.html  View
308725 29370 CVE-2007-6013 MISC:http://www.cl.cam.ac.uk/~sjm217/advisories/wordpress-cookie-auth.txt  View
308726 29370 CVE-2007-6013 CONFIRM:http://trac.wordpress.org/ticket/5367  View
308727 29370 CVE-2007-6013 FEDORA:FEDORA-2008-0103  View
308728 29370 CVE-2007-6013 URL:https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00079.html  View
308729 29370 CVE-2007-6013 FEDORA:FEDORA-2008-0126  View
308730 29370 CVE-2007-6013 URL:https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00098.html  View
308731 29370 CVE-2007-6013 VUPEN:ADV-2007-3941  View
308732 29370 CVE-2007-6013 URL:http://www.vupen.com/english/advisories/2007/3941  View
308733 29370 CVE-2007-6013 OSVDB:40801  View
308734 29370 CVE-2007-6013 URL:http://osvdb.org/40801  View
308735 29370 CVE-2007-6013 SECTRACK:1018980  View
308736 29370 CVE-2007-6013 URL:http://www.securitytracker.com/id?1018980  View
308737 29370 CVE-2007-6013 SECUNIA:27714  View
308738 29370 CVE-2007-6013 URL:http://secunia.com/advisories/27714  View
308739 29370 CVE-2007-6013 SECUNIA:28310  View
308740 29370 CVE-2007-6013 URL:http://secunia.com/advisories/28310  View
308741 29370 CVE-2007-6013 SREASON:3375  View
308742 29370 CVE-2007-6013 URL:http://securityreason.com/securityalert/3375  View
308743 29370 CVE-2007-6013 XF:wordpress-password-weak-security(38578)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52329 JVNDB-2007-001019 Samba の send_mailslot() 関数におけるバッファオーバーフローの脆弱性 Samba には domain logons オプションを有効にしている場合、nmbd における send_mailslot() 関数に、スタックベースのバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-6015 29370 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001019.html  View