The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.

Several remote vulnerabilities have been discovered in Wordpress, the weblog manager. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-1599     WordPress allows remote attackers to redirect     authenticated users to other websites and potentially     obtain sensitive information.

  - CVE-2008-0664     The XML-RPC implementation, when registration is     enabled, allows remote attackers to edit posts of other     blog users.

- Fri Feb 8 2008 John Berninger <john at ncphotography dot     com> - 2.3.3-0

    - update to 2.3.3 for security fixes - BZ 431547

    - Sun Dec 30 2007 Adrian Reber <adrian at lisas.de> -       2.3.2-1

    - updated to 2.3.2 (bz 426431, Draft Information       Disclosure)

    - Tue Oct 30 2007 Adrian Reber <adrian at lisas.de> -       2.3.1-1

    - updated to 2.3.1 (bz 357731, wordpress XSS issue)

    - Mon Oct 15 2007 Adrian Reber <adrian at lisas.de> -       2.3-1

    - updated to 2.3

    - disabled wordpress-core-update

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fri Feb 8 2008 John Berninger <john at ncphotography dot     com> - 2.3.3-0

    - update to 2.3.3 for security fixes - BZ 431547

    - Sun Dec 30 2007 Adrian Reber <adrian at lisas.de> -       2.3.2-1

    - updated to 2.3.2 (bz 426431, Draft Information       Disclosure)

    - Tue Oct 30 2007 Adrian Reber <adrian at lisas.de> -       2.3.1-1

    - updated to 2.3.1 (bz 357731, wordpress XSS issue)

    - Mon Oct 15 2007 Adrian Reber <adrian at lisas.de> -       2.3-1

    - updated to 2.3

    - disabled wordpress-core-update

    - Tue Sep 11 2007 Adrian Reber <adrian at lisas.de> -       2.2.3-0

    - updated to 2.2.3 (security release)

    - Wed Aug 29 2007 John Berninger <john at ncphotography       dot com> - 2.2.2-0

    - update to upstream 2.2.2

    - license tag update

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of WordPress installed on the remote host is vulnerable to an unauthorized access attack.  An attacker exploiting this flaw would need the ability to authenticate as a valid user.  Upon authentication, the user would be able to manipulate data sent to the 'xmlrpc.php' script which would allow for editing of other user posts.

ID	Name	Product	Family	Severity
33402	Debian DSA-1601-1 : wordpress - several vulnerabilities	Nessus	Debian Local Security Checks	medium
31069	Fedora 8 : wordpress-2.3.3-0.fc8 (2008-1559)	Nessus	Fedora Local Security Checks	medium
31064	Fedora 7 : wordpress-2.3.3-0.fc7 (2008-1512)	Nessus	Fedora Local Security Checks	medium
4364	WordPress < 2.3.3 XML-RPC Unauthenticated Post Modification	Nessus Network Monitor	CGI	medium

Detections

Analytics

CVE-2008-0664

high

Tenable Plugins

medium

medium

medium

medium