NVD

Id
38269  
Name
CVE-2013-2173  
Description
wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (CPU consumption) via a crafted value of a certain wp-postpass cookie.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-06-21  
Modified Date
2013-08-22  
Seq
2013-2173  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195708 38269 CVE-2013-2173 20130613 Re: WordPress 3.5.1, Denial of Service  View
195709 38269 CVE-2013-2173 http://codex.wordpress.org/Version_3.5.2  View
195710 38269 CVE-2013-2173 [oss-security] 20130612 Re: CVE request: WordPress 3.5.1 denial of service vulnerability  View
195711 38269 CVE-2013-2173 http://wordpress.org/news/2013/06/wordpress-3-5-2/  View
195712 38269 CVE-2013-2173 DSA-2718  View
195713 38269 CVE-2013-2173 https://github.com/wpscanteam/wpscan/issues/219  View
195714 38269 CVE-2013-2173 https://vndh.net/note:wordpress-351-denial-service  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21511 JVNDB-2013-003086 WordPress の wp-includes/class-phpass.php におけるサービス運用妨害 (DoS) の脆弱性 WordPress の wp-includes/class-phpass.php には、パスワードで保護された投稿がある場合に、サービス運用妨害 (CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2013-2173 62115 CVE-2013-2173 38269 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003086.html 2013-06-07 2013-08-19 View