Description

The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a large file, which triggers a long download session without a timeout constraint.

Remediation

References

CVE-2007-0539

Related Vulnerabilities

PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-6833)

WordPress Plugin RAYS Grid Cross-Site Request Forgery (1.2.2)

Atlassian Jira CVE-2021-39122 Vulnerability (CVE-2021-39122)

Oracle HTTP Server Other Vulnerability (CVE-2006-5347)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4396)

Severity

High

Classification

CVE-2007-0539

Tags

Missing Update Known Vulnerabilities