CVE-2014-9037 Wordpress Core < 4.0.1 - Hash Collision
MediumCVSS 6.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress(WordPress) | < 3.7 | 3.7 |
| WordPress(WordPress) | >= 3.7, < 3.7.5 | 3.7.5 |
| WordPress(WordPress) | >= 3.8, < 3.8.5 | 3.8.5 |
| WordPress(WordPress) | >= 3.9, < 3.9.3 | 3.9.3 |
| WordPress(WordPress) | = 4.0 | No fix listed |
| debian/wordpress(Debian:12) | < 4.0.1+dfsg-1 | 4.0.1+dfsg-1 |
| debian/wordpress(Debian:13) | < 4.0.1+dfsg-1 | 4.0.1+dfsg-1 |
| debian/wordpress(Debian:14) | < 4.0.1+dfsg-1 | 4.0.1+dfsg-1 |
| mageia project mageia | = 3 | No fix listed |
| mageia project mageia | = 4 | No fix listed |
| WordPress | <= 3.7.4 | No fix listed |
| WordPress | = 3.8 | No fix listed |
| WordPress | = 3.8.1 | No fix listed |
| WordPress | = 3.8.2 | No fix listed |
| WordPress | = 3.8.3 | No fix listed |
| WordPress | = 3.8.4 | No fix listed |
| WordPress | = 3.9 | No fix listed |
| WordPress | = 3.9.1 | No fix listed |
| WordPress | = 3.9.2 | No fix listed |
| WordPress | = 4.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- Debian Security Tracker CVE-2014-9037 vendor-advisory
- advisories.mageia.org
- [oss-security] 20141125 Re: WordPress 4.0.1 Security Release mailing-list
- DSA-3085 vendor-advisory
- MDVSA-2014:233 vendor-advisory
- 1031243 vdb-entry
- wordpress.org patch vendor-advisory
- bugs.debian.org issue-tracking