ID de Prueba:	1.3.6.1.4.1.25623.1.0.56935
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200606-08 (wordpress)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200606-08.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200606-08. Vulnerability Insight: WordPress fails to sufficiently check the format of cached username data. Solution: All WordPress users should upgrade to the latest available version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/wordpress-2.0.3' CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-2667 BugTraq ID: 18372 http://www.securityfocus.com/bid/18372 Bugtraq: 20060525 Wordpress <=2.0.2 'cache' shell injection (Google Search) http://www.securityfocus.com/archive/1/435039/100/0/threaded http://www.gentoo.org/security/en/glsa/glsa-200606-08.xml http://retrogod.altervista.org/wordpress_202_xpl.html http://www.osvdb.org/25777 http://secunia.com/advisories/20271 http://secunia.com/advisories/20608 http://www.vupen.com/english/advisories/2006/1992 XForce ISS Database: wordpress-user-profile-code-injection(26687) https://exchange.xforce.ibmcloud.com/vulnerabilities/26687 Common Vulnerability Exposure (CVE) ID: CVE-2006-2702 http://www.osvdb.org/25935 XForce ISS Database: wordpress-pcremoteaddr-ip-spoofing(26688) https://exchange.xforce.ibmcloud.com/vulnerabilities/26688
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.