Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2011-3129
HistoryAug 10, 2011 - 9:55 p.m.

CVE-2011-3129

2011-08-1021:55:02
Debian Security Bug Tracker
security-tracker.debian.org
12

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.003

Percentile

70.7%

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running “on hosts with dangerous security settings,” has unknown impact and attack vectors, possibly related to dangerous filenames.

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.003

Percentile

70.7%