Description
The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for "user convenience."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | wordpress | 2.8.3-1 | — |
| Debian 13 | wordpress | 2.8.3-1 | — |
| Debian 12 | wordpress | 2.8.3-1 | — |
References
- FEDORA-2009-8538 vendor-advisory
- http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked
- FEDORA-2009-7729 vendor-advisory
- 20090708 CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information mailing-list
- 1022528 vdb-entry
- FEDORA-2009-7701 vendor-advisory
- ADV-2009-1833 vdb-entry
- FEDORA-2009-8529 vendor-advisory
- 9110 exploit
- 55714 vdb-entry
- 35581 vdb-entry