Detections
Analytics
FreeBSD : wordpress -- multiple vulnerabilities (0640198a-d117-11de-b667-0030843d3802)
medium Nessus Plugin ID 42808
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
secunia reports :The security issue is caused due to the wp_check_filetype() function in /wp-includes/functions.php improperly validating uploaded files.
This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script with multiple extensions.
Successful exploitation of this vulnerability requires that Apache is not configured to handle the mime-type for media files with an e.g.
'gif', 'jpg', 'png', 'tif', 'wmv' extension.
Input passed via certain parameters to press-this.php is not properly sanitised before being displayed to the user. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Medium
ID: 42808
File Name: freebsd_pkg_0640198ad11711deb6670030843d3802.nasl
Version: 1.13
Type: local
Family: FreeBSD Local Security Checks
Published: 11/16/2009
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6
Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:de-wordpress, p-cpe:/a:freebsd:freebsd:wordpress, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 11/14/2009
Vulnerability Publication Date: 11/12/2009
Reference Information
CVE: CVE-2009-3890, CVE-2009-3891