Test Kennung:	1.3.6.1.4.1.25623.1.0.900968
Kategorie:	Denial of Service
Titel:	WordPress wp-trackback.php Denial of Service Vulnerability
Zusammenfassung:	WordPress is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: WordPress is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: An error occurs in wp-trackbacks.php due to improper validation of user supplied data passed into 'mb_convert_encoding()' function. This can be exploited by sending multiple-source character encodings into the function. Vulnerability Impact: Successful exploitation will allow attacker to cause a Denial of Service due to high CPU consumption. Affected Software/OS: WordPress version prior to 2.8.5 on all platforms. Solution: Upgrade to WordPress version 2.8.5 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3622 1023072 http://securitytracker.com/id?1023072 20091019 [Wordpress] Resource Exhaustion (Denial of Service) http://seclists.org/fulldisclosure/2009/Oct/263 37088 http://secunia.com/advisories/37088 59077 http://www.osvdb.org/59077 ADV-2009-2986 http://www.vupen.com/english/advisories/2009/2986 [oss-security] 20091021 CVE request: Wordpress Trackback DoS http://marc.info/?l=oss-security&m=125612393329041&w=2 [oss-security] 20091021 Re: CVE request: Wordpress Trackback DoS http://marc.info/?l=oss-security&m=125614592004825&w=2 http://codes.zerial.org/php/wp-trackbacks_dos.phps http://rooibo.wordpress.com/2009/10/17/agujero-de-seguridad-en-wordpress/ http://security-sh3ll.blogspot.com/2009/10/wordpress-resource-exhaustion-denial-of.html http://wordpress.org/development/2009/10/wordpress-2-8-5-hardening-release/ https://bugzilla.redhat.com/show_bug.cgi?id=530056 wordpress-wptrackback-dos(53884) https://exchange.xforce.ibmcloud.com/vulnerabilities/53884
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.