CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.

Versions of WordPress prior to 1.2.2 are vulnerable to various flaws that may allow an attacker to perform an HTML injection attack against the remote host or to allow an attacker to execute arbitrary SQL statements against the remote database.

The remote host is affected by the vulnerability described in GLSA-200410-12 (WordPress: HTTP response splitting and XSS vulnerabilities)

    Due to the lack of input validation in the administration panel     scripts, WordPress is vulnerable to HTTP response splitting and     cross-site scripting attacks.
  Impact :

    A malicious user could inject arbitrary response data, leading to     content spoofing, web cache poisoning and other cross-site scripting or     HTTP response splitting attacks. This could result in compromising the     victim's data or browser.
  Workaround :

    There is no known workaround at this time.

According to its banner, the remote version of WordPress is vulnerable to an HTTP-splitting attack wherein an attacker can insert CR LF characters and then entice an unsuspecting user into accessing the URL. The client will parse and possibly act on the secondary header which was supplied by the attacker.

Versions of WordPress prior to 1.2.1 are vulnerable to an HTTP-splitting attack where an attacker can insert CRLF characters and then entice an unsuspecting user into accessing the URL.  The client will parse and possibly act on the secondary header that was supplied by the attacker.

ID	Name	Product	Family	Severity
2465	WordPress < 1.2.2 Multiple Vulnerabilities	Nessus Network Monitor	CGI	low
15473	GLSA-200410-12 : WordPress: HTTP response splitting and XSS vulnerabilities	Nessus	Gentoo Local Security Checks	medium
15443	WordPress 'wp-login.php' HTTP Response Splitting	Nessus	CGI abuses	medium
2356	WordPress < 1.2.1 'wp-login.php' HTTP Response Splitting	Nessus Network Monitor	CGI	medium

Detections

Analytics

CVE-2004-1584

medium

Tenable Plugins

low

medium

medium

medium