NVD

Id
50820  
Name
CVE-2009-3622  
Description
Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service (CPU consumption and server hang) via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related to the mb_convert_encoding function in PHP.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2009-10-23  
Modified Date
2009-10-26  
Seq
2009-3622  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
257279 50820 CVE-2009-3622 http://codes.zerial.org/php/wp-trackbacks_dos.phps  View
257280 50820 CVE-2009-3622 [oss-security] 20091021 CVE request: Wordpress Trackback DoS  View
257281 50820 CVE-2009-3622 [oss-security] 20091021 Re: CVE request: Wordpress Trackback DoS  View
257282 50820 CVE-2009-3622 http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/  View
257283 50820 CVE-2009-3622 20091019 [Wordpress] Resource Exhaustion (Denial of Service)  View
257284 50820 CVE-2009-3622 http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html  View
257285 50820 CVE-2009-3622 1023072  View
257286 50820 CVE-2009-3622 http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/  View
257287 50820 CVE-2009-3622 ADV-2009-2986  View
257288 50820 CVE-2009-3622 wordpress-wptrackback-dos(53884)  View
257289 50820 CVE-2009-3622 https://bugzilla.redhat.com/show_bug.cgi?id=530056  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45398 JVNDB-2009-006405 WordPress の wp-trackback.php におけるサービス運用妨害 (DoS) の脆弱性 WordPress の wp-trackback.php は、アルゴリズムの複雑性、および PHP の mb_convert_encoding 関数に関する処理に不備があるため、サービス運用妨害 (CPU の消費およびサーバハング) 状態となる脆弱性が存在します。 CVE-2009-3622 41053 CVE-2009-3622 50820 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006405.html 2009-10-20 2012-12-20 View