CVE-2006-3389

2006-07-0620:05:00

Debian Security Bug Tracker

security-tracker.debian.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.01 Low

EPSS

Percentile

83.9%

JSON

index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message. NOTE: this issue has been disputed by a third party who states that the issue does not leak any target-specific information.

OSVersionArchitecturePackageVersionFilename
Debian12allwordpress< 2.0.4-1wordpress_2.0.4-1_all.deb
Debian11allwordpress< 2.0.4-1wordpress_2.0.4-1_all.deb
Debian999allwordpress< 2.0.4-1wordpress_2.0.4-1_all.deb
Debian13allwordpress< 2.0.4-1wordpress_2.0.4-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	wordpress	< 2.0.4-1	wordpress_2.0.4-1_all.deb
Debian	11	all	wordpress	< 2.0.4-1	wordpress_2.0.4-1_all.deb
Debian	999	all	wordpress	< 2.0.4-1	wordpress_2.0.4-1_all.deb
Debian	13	all	wordpress	< 2.0.4-1	wordpress_2.0.4-1_all.deb