- Mon Dec 1 2008 Bret McMillan <bretm at redhat.com> -     2.6.5-1

    - Update to 2.6.5

    -       http://wordpress.org/development/2008/11/wordpress-265       /

    - http://ocaoimh.ie/2008/11/25/wordpress-mu-265/

    - Fixes 1 XSS security issue, 3 bugs

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Secunia reports :

Input passed via the HTTP 'Host' header is not properly sanitised before being used. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site if malicious data is viewed.

リモートホストにインストールされているバージョンのWordPressは、「Host」リクエストヘッダーへの入力を、動的HTML出力を生成するための「wp-includes/feed.php」の「self_link（）」関数で使用する前に、適切にサニタイズできません。攻撃者は、この問題を活用して、任意のHTMLおよびスクリプトコードをユーザーのブラウザに送りこみ、影響を受けるサイトのセキュリティコンテキストで実行することができます。

遠端主機上安裝的 WordPress 版本未正確清理「Host」要求標頭的輸入內容，便將其用於「wp-includes/feed.php」的「self_link()」函式中，以產生動態 HTML 輸出。攻擊者可利用此問題，將任意 HTML 和指令碼插入使用者的瀏覽器，以便在受影響網站的安全性內容中執行。

The version of WordPress installed on the remote host fails to properly sanitize input to the 'Host' request header before using it in the 'self_link()' function in 'wp-includes/feed.php' to generate dynamic HTML output. An attacker can leverage this issue to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected site.

http://wordpress.org/development/2008/11/wordpress-265/

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of WordPress installed on the remote host fails to completely sanitize input to the the 'Host' request header before using it in the 'self_link()' function in 'wp-includes/feed.php' to generate dynamic HTML output.  An attacker may be able to leverage this to inject arbitrary HTML and script code into a user's browser to be executed within the security context of the affected site.

ID	名稱	產品	系列	已發布	已更新	嚴重性
37255	Fedora 10 : wordpress-mu-2.6.5-1.fc10 (2008-11104)	Nessus	Fedora Local Security Checks	2009/4/23	2021/1/11	medium
34978	FreeBSD : wordpress -- header rss feed script insertion vulnerability (622bc638-be27-11dd-a578-0030843d3802)	Nessus	FreeBSD Local Security Checks	2008/12/1	2021/1/6	medium
34994	WordPress wp-includes/feed.php self_link（）関数のHostヘッダーRSSフィードのXSS	Nessus	CGI abuses : XSS	2008/12/2	2024/6/6	medium
34994	WordPress wp-includes/feed.php self_link() 函式主機標頭 RSS 摘要 XSS	Nessus	CGI abuses : XSS	2008/12/2	2024/6/6	medium
34994	WordPress wp-includes/feed.php self_link() Function Host Header RSS Feed XSS	Nessus	CGI abuses : XSS	2008/12/2	2024/6/6	medium
35012	Fedora 8 : wordpress-2.6.5-2.fc8 (2008-10468)	Nessus	Fedora Local Security Checks	2008/12/3	2021/1/11	medium
35013	Fedora 9 : wordpress-2.6.5-2.fc9 (2008-10483)	Nessus	Fedora Local Security Checks	2008/12/3	2021/1/11	medium
36853	Fedora 10 : wordpress-2.6.5-2.fc10 (2008-10482)	Nessus	Fedora Local Security Checks	2009/4/23	2021/1/11	medium
4775	WordPress < 2.6.5 'feed.php' XSS	Nessus Network Monitor	CGI	2008/12/2	2019/3/6	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium