130 matches found
WordPress <= 2.1 - Denial of Service Attacks
The attackers can cause a denial of service attacks via pingback service calls. Solution Update the WordPress to the latest available version at least 2.2...
WordPress <= 2.0 - Denial of Service Attacks
The wpremotefopen function allows the attackers to cause a denial of service attacks via pingback service calls. Solution Update the WordPress to the latest available version at least 2.0.1...
Wordpress Pingback SourceURI拒绝服务和信息泄露漏洞
Wordpress是一款基于WEB的网络日记应用程序。 Wordpress包含的XMLRPC和Pingback存在多个问题，远程攻击者可以利用漏洞进行拒绝服务攻击或者获得敏感信息。 Wordpress处理Pingback机制存在问题，发送恶意请求可导致拒绝服务攻击。 另外由于在传递给wpremotefopen函数时对sourceURI参数缺少过滤，可导致指定非HTTP资源来读取类似本地文件或者FTP源的信息。特定情况下，恶意用户可判断部分文件是否存在在系统中。 WordPress Wordpress B2 0.6.2 .1 WordPress Wordpress B2 0.6.2...
DoS against Telligent Community Server
Advisory: DoS against Telligent Community Server Advisory ID: 4tphi-sa-20070111-communityserver Release Date: 01-24-2007 Author: Blake Matheny [email protected] Software: Community Server = 2.1 Impact: Remote DoS Overview: From Wikipedia, "Community Server is a community collaboration platfo...
Weaknesses in Pingback Design
Advisory: Weaknesses in Pingback Design Advisory ID: 4tphi-sa-20070111-pingback Release Date: 01-24-2007 Author: Blake Matheny [email protected] Software: Multiple Impact: Remote DoS Overview: From Wikipedia, "A Pingback is one of three types of Linkbacks, methods for Web authors to request...
Multiple Remote Vulnerabilities in Wordpress
Advisory: Multiple Remote Vulnerabilities in Wordpress Advisory ID: 4tphi-sa-20070111-wordpress Release Date: 01-24-2007 Author: Blake Matheny [email protected] Software: WordPress 2.1 Impact: Remote & Local DoS, File Disclosure Overview: From Wikipedia, "WordPress is a blog publishing syste...
WordPress Pingback File Information Disclosure
The version of WordPress installed on the remote host fails to sanitize the 'sourceURI' before passing it to the 'wpremotefopen' function when processing pingbacks. An unauthenticated, remote attacker can leverage this issue to determine the existence of local files and possibly to view portions ...
WordPress 1.x2.0.x - Pingback SourceURI Denial of Service Information Disclosure
WordPress 1.x2.0.x - Pingback SourceURI Denial of Service Information Disclosure source: https://www.securityfocus.com/bid/22220/info WordPress is prone to a denial-of-service vulnerability and an information-disclosure vulnerability. Attackers can exploit these issues to consume memory and...
WordPress Core 1.x/2.0.x - Pingback SourceURI Denial of Service / Information Disclosure
source: https://www.securityfocus.com/bid/22220/info WordPress is prone to a denial-of-service vulnerability and an information-disclosure vulnerability. Attackers can exploit these issues to consume memory and bandwidth resources, denying service to legitimate users, or to gain information that...