CVE

Id
39770  
CVE No.
CVE-2009-2335  
Status
Candidate  
Description
WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for "user convenience."  
Phase
Assigned (20090705)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
436804 39770 CVE-2009-2335 BUGTRAQ:20090708 CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information  View
436805 39770 CVE-2009-2335 URL:http://www.securityfocus.com/archive/1/archive/1/504795/100/0/threaded  View
436806 39770 CVE-2009-2335 MILW0RM:9110  View
436807 39770 CVE-2009-2335 URL:http://www.milw0rm.com/exploits/9110  View
436808 39770 CVE-2009-2335 MISC:http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked  View
436809 39770 CVE-2009-2335 FEDORA:FEDORA-2009-7701  View
436810 39770 CVE-2009-2335 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html  View
436811 39770 CVE-2009-2335 FEDORA:FEDORA-2009-7729  View
436812 39770 CVE-2009-2335 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html  View
436813 39770 CVE-2009-2335 FEDORA:FEDORA-2009-8529  View
436814 39770 CVE-2009-2335 URL:https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html  View
436815 39770 CVE-2009-2335 FEDORA:FEDORA-2009-8538  View
436816 39770 CVE-2009-2335 URL:https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html  View
436817 39770 CVE-2009-2335 BID:35581  View
436818 39770 CVE-2009-2335 URL:http://www.securityfocus.com/bid/35581  View
436819 39770 CVE-2009-2335 OSVDB:55713  View
436820 39770 CVE-2009-2335 URL:http://www.osvdb.org/55713  View
436821 39770 CVE-2009-2335 SECTRACK:1022528  View
436822 39770 CVE-2009-2335 URL:http://securitytracker.com/id?1022528  View
436823 39770 CVE-2009-2335 VUPEN:ADV-2009-1833  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45122 JVNDB-2009-006129 Rentventory の index.php における SQL インジェクションの脆弱性 Rentventory の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-2339 39770 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006129.html  View