Test ID:	1.3.6.1.4.1.25623.1.0.891742
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-1742-1)
Summary:	The remote host is missing an update for the Debian 'wordpress' package(s) announced via the DLA-1742-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'wordpress' package(s) announced via the DLA-1742-1 advisory. Vulnerability Insight: Simon Scannell of Ripstech Technologies discovered multiple vulnerabilities in wordpress, a web blogging manager. CVE-2019-8942 remote code execution in wordpress because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with a .jpg?file.php substring. An attacker with author privileges can execute arbitrary code by uploading a crafted image containing PHP code in the Exif metadata. CVE-2019-9787 wordpress does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default configuration. This occurs because CSRF protection is mishandled, and because Search Engine Optimization of A elements is performed incorrectly, leading to XSS. The XSS results in administrative access. For Debian 8 Jessie, these problems have been fixed in version 4.1.26+dfsg-1+deb8u1. We recommend that you upgrade your wordpress packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: [link moved to references] Affected Software/OS: 'wordpress' package(s) on Debian 8. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-8942 BugTraq ID: 107088 http://www.securityfocus.com/bid/107088 Debian Security Information: DSA-4401 (Google Search) https://www.debian.org/security/2019/dsa-4401 https://www.exploit-db.com/exploits/46511/ https://www.exploit-db.com/exploits/46662/ http://packetstormsecurity.com/files/152396/WordPress-5.0.0-crop-image-Shell-Upload.html http://www.rapid7.com/db/modules/exploit/multi/http/wp_crop_rce https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/ https://wpvulndb.com/vulnerabilities/9222 https://lists.debian.org/debian-lts-announce/2019/03/msg00044.html Common Vulnerability Exposure (CVE) ID: CVE-2019-9787 BugTraq ID: 107411 http://www.securityfocus.com/bid/107411 Debian Security Information: DSA-4677 (Google Search) https://www.debian.org/security/2020/dsa-4677 https://blog.ripstech.com/2019/wordpress-csrf-to-rce/ https://github.com/WordPress/WordPress/commit/0292de60ec78c5a44956765189403654fe4d080b https://wordpress.org/news/2019/03/wordpress-5-1-1-security-and-maintenance-release/ https://wordpress.org/support/wordpress-version/version-5-1-1/ https://wpvulndb.com/vulnerabilities/9230
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.