• info
• discussion
• exploit
• solution
• references

WordPress Lost Password SQL Column Truncation Unauthorized Access Vulnerability

Solution:
The vendor has addressed this issue in WordPress 2.6.2. Contact the vendor for more information.


Debian Linux 4.0 amd64

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 4.0 ia-32

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 4.0 arm

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 5.0 hppa

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 5.0 ia-64

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 4.0 hppa

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 4.0 sparc

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 4.0 s/390

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 5.0 m68k

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 5.0 arm

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 4.0 powerpc

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 4.0 alpha

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 4.0 armel

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 5.0 armel

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 4.0 m68k

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 5.0

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 4.0

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 4.0 mipsel

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 5.0 amd64

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 5.0 alpha

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 5.0 ia-32

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 5.0 mips

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 5.0 s/390

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 5.0 mipsel

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 5.0 powerpc

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb

Debian Linux 4.0 ia-64

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 4.0 mips

• Debian wordpress_2.0.10-1etch4_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.0 .10-1etch4_all.deb

Debian Linux 5.0 sparc

• Debian wordpress_2.5.1-11+lenny1_all.deb
  http://security.debian.org/pool/updates/main/w/wordpress/wordpress_2.5 .1-11+lenny1_all.deb