JVN Info.

Id
50911  
Name
JVNDB-2008-006221  
Title
WordPress におけるユーザパスワードを任意の値に変更される脆弱性  
Summary
WordPress は、user_login 列の最大列幅を超えるユーザ名の文字列を挿入する際に MySQL 警告を適切に処理しない、およびユーザ名を比較するの際にスペース文字を適切に処理しない、および "SQL の列短縮の脆弱性" の不備があるため、ユーザパスワードを任意の値に変更される脆弱性が存在します。  
Nvdinfo
CVE-2008-4106  
Cvssv2
5.1  
Jvnurl
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006221.html  
Published Date
2008-09-08  
Registered Date
2012-12-20  
Last Updated Date
2012-12-20  

Actions

Related Nessuslogs

Id Log ID Jvninfo Id Plugin ID CVE CVSS Risk Host Protocol Port Name Synopsis Description Solution See Also Plugin Output Actions
51780 H28_MUN_DWEB_Q4_172_16_240_seg.csv 50911 89736 CVE-2009-3728 10 Critical 172.16.240.115 tcp 443 VMware ESX Java Runtime Environment (JRE) Multiple Vulnerabilities (VMSA-2010-0002) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the bundled version of the Java Runtime Environment (JRE). Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0002 http://lists.vmware.com/pipermail/security-announce/2010/000097.html Version : ESX 4.0 Installed build : 208167 Fixed build : 256968
57361 H28_DWEB_NW_Scan_Q1_172_16_240_Seg_20160518_hepxqa.csv 50911 89736 CVE-2009-3728 10 Critical 172.16.240.115 tcp 443 VMware ESX Java Runtime Environment (JRE) Multiple Vulnerabilities (VMSA-2010-0002) (remote check) The remote VMware ESX host is missing a security-related patch. The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in the bundled version of the Java Runtime Environment (JRE). Apply the appropriate patch according to the vendor advisory that pertains to ESX version 3.5 / 4.0. https://www.vmware.com/security/advisories/VMSA-2010-0002 http://lists.vmware.com/pipermail/security-announce/2010/000097.html Version : ESX 4.0 Installed build : 208167 Fixed build : 256968