|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200410-12] WordPress: HTTP response splitting and XSS vulnerabilities Vulnerability Scan
Vulnerability Scan Summary
WordPress: HTTP response splitting and XSS vulnerabilities
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200410-12
(WordPress: HTTP response splitting and XSS vulnerabilities)
Due to the lack of input validation in the administration panel
scripts, WordPress is vulnerable to HTTP response splitting and
cross-site scripting attacks.
Impact
A malicious user could inject arbitrary response data, leading to
content spoofing, web cache poisoning and other cross-site scripting or
HTTP response splitting attacks. This could result in compromising the
victim's data or browser.
Workaround
There is no known workaround at this time.
References:
http://wordpress.org/development/2004/12/one-point-two-two/
Solution:
All WordPress users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/wordpress-1.2.2"
Threat Level: Low
Click HERE for more information and discussions on this network vulnerability scan.
|
