Description

WordPress is prone to a security bypass vulnerability because it fails to adequately restrict access to the password reset feature. An attacker can exploit this issue to reset the administrator password of the application. Repeated attacks may allow the attacker to cause persistent Denial of Service conditions. WordPress version 2.8.3 is vulnerable; prior versions may also be affected.

Remediation

Update to WordPress version 2.8.4 or latest

References

http://archives.neohapsis.com/archives/fulldisclosure/2009-08/0114.html

http://blog.sucuri.net/2009/08/wordpress-2-8-3-remote-admin-reset-password.html

http://packetstormsecurity.org/files/view/80258/wordpress-adminreset.txt

http://secunia.com/advisories/36237

Related Vulnerabilities

WordPress Plugin Basic Dev Tools Multiple Cross-Site Scripting Vulnerabilities (1.4.1)

WordPress Plugin WP DS FAQ Plus Cross-Site Scripting (1.4.1)

WordPress Plugin WordPress File Upload Cross-Site Scripting (4.3.3)

PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-7375)

WordPress Plugin Automatic Online Backup 'url' Parameter Cross-Site Scripting (0.8.2)

Severity

High

Classification

CVE-2009-2762 CWE-255 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update Authentication Bypass