Vulnerability CVE-2013-2173
Published: 2013-06-21

Description:
wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (CPU consumption) via a crafted value of a certain wp-postpass cookie.

See advisories in our WLB2 database:
Topic
Author
Date
Low
WordPress 3.5.1 Denial of Service
Krzysztof Katowi...
11.06.2013
Low
WordPress 3.5.1 Denial of Service Exploit
Krzysztof Katowi...
11.06.2013
Med.
WordPress Denial of Service .py exploit
MustLive
30.06.2013

Type:

CWE-310

 (Cryptographic Issues)

CVSS2 => (AV:N/AC:M/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.3/10
2.9/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Wordpress -> Wordpress 

 References:
https://vndh.net/note:wordpress-351-denial-service
https://github.com/wpscanteam/wpscan/issues/219
http://openwall.com/lists/oss-security/2013/06/12/2
Copyright 2024, cxsecurity.com

 

Back to Top