CVE-2007-0539 — Wordpress vulnerability

5 documents5 sources

Severity

7.8HIGHNVD

EPSS

1.4%

top 19.68%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wordpress Debian Wordpress

Timeline

PublishedJan 29

Latest updateMay 1

Description

The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a large file, which triggers a long download session without a timeout constraint.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages3 packages

▶debiandebian/wordpress< wordpress 2.1.0-1 (bookworm)

▶Debianwordpress/wordpress< 2.1.0-1+3

▶NVDwordpress/wordpress2.0

🔴Vulnerability Details

GHSA

GHSA-v3r5-4wmw-ccc3: The wp_remote_fopen function in WordPress before 2↗2022-05-01

▶

OSV

CVE-2007-0539: The wp_remote_fopen function in WordPress before 2↗2007-01-29

▶

📋Vendor Advisories

Debian

CVE-2007-0539: wordpress - The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to ...↗2007

▶

💬Community

Bugzilla

wordpress < 2.1 multiple vulnerabilities↗2007-01-30

▶