---

[Message Precedent sur la mailing][Message Suivant sur la mailing][Precedent dans le fil][Prochain dans le fil][Index par Date][Index par fil] [SA25541] WordPress Unmoderated Comments Disclosure Security Issue

---

---

Try a new way to discover vulnerabilities that ALREADY EXIST in your IT infrastructure.

The Full Featured Secunia Network Software Inspector (NSI) is now available: link://[click] The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT vulnerabilities in more than 4,000 different Windows applications.



TITLE: WordPress Unmoderated Comments Disclosure Security Issue

SECUNIA ADVISORY ID: SA25541

VERIFY ADVISORY: link://[click]

CRITICAL: Not critical

IMPACT: Exposure of sensitive information

WHERE: From remote SOFTWARE: WordPress 2.x link://[click]

DESCRIPTION: Sumit Siddharth has discovered a security issue in WordPress, which can be exploited by malicious people to disclose potentially sensitive information.

The security issue is caused due to WordPress using predictable cookies to identify the author of a comment. This can be exploited to view unmoderated comments by guessing and then faking the cookies sent to the original author.

Successful exploitation requires knowledge of the original author's name and email address.

The security issue is confirmed in version 2.2. Other versions may also be affected.

SOLUTION: Do not post security sensitive information in comments. Edit the source code to ensure that unpredictable cookies are used.

PROVIDED AND/OR DISCOVERED BY: Sumit Siddharth

ORIGINAL ADVISORY: link://[click]

About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.

Subscribe: link://[click]

Definitions: (Criticality, Where etc.) link://[click]

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link.

Secunia NEVER sends attached files with advisories.

Secunia does not advise people to install third party patches, only use those supplied by the vendor.

---

• Precedent par Date: [SA25485] SNMPc Server Packet Processing Denial of Service Vulnerability
• Suivant par Date: [SA25524] Particle Gallery "editcomment" SQL Injection Vulnerability
• Precedent par fil : [SA25485] SNMPc Server Packet Processing Denial of Service Vulnerability
• Suivant par fil : [SA25524] Particle Gallery "editcomment" SQL Injection Vulnerability
• Index(s):
  • Date
  • Fil

---

Archives de la liste de diffusion Secunia
Archives de la liste de diffusion BugTraq
Archives de la liste de diffusion DailyDave
Archives de la liste de diffusion FunSec
Archives de la liste de diffusion Full Disclosure
Archives de la liste de diffusion Focus-IDS (FD)
Archives de la liste de diffusion Webappsec (FD)
Archives de la liste de diffusion Security-basics (FD)
Archives de la liste de diffusion Vulndiscuss
Archives de la liste de diffusion Vulnwatch