Description
Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. NOTE: due to lack of details, it is not clear how these issues are different from CVE-2006-3389 and CVE-2006-3390, although it is likely that 2.0.4 addresses an unspecified issue related to "Anyone can register" functionality (user registration for guests).
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wordpress | 2.0.4-1 | — |
| Debian 13 | wordpress | 2.0.4-1 | — |
| Debian 12 | wordpress | 2.0.4-1 | — |
References
- ADV-2006-3071 vdb-entry
- 21447 third-party-advisory
- 19247 vdb-entry
- http://wordpress.org/development/2006/07/wordpress-204/
- 21309 third-party-advisory
- http://unknowngenius.com/blog/archives/2006/07/27/followup-on-wordpress/
- GLSA-200608-19 vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=142142
- http://unknowngenius.com/blog/archives/2006/07/26/critical-announcement-to-all-wordpress-users/
- 27633 vdb-entry