CVE-2006-3389 Affecting wordpress package, versions <2.0.4-1
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIANUNSTABLE-WORDPRESS-363002
- published 6 Jul 2006
- disclosed 6 Jul 2006
Introduced: 6 Jul 2006
CVE-2006-3389 Open this link in a new tabHow to fix?
Upgrade Debian:unstable wordpress to version 2.0.4-1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream wordpress package and not the wordpress package as distributed by Debian.
See How to fix? for Debian:unstable relevant fixed versions and status.
index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message. NOTE: this issue has been disputed by a third party who states that the issue does not leak any target-specific information.
References
- https://security-tracker.debian.org/tracker/CVE-2006-3389
- http://www.securityfocus.com/archive/1/438942/100/0/threaded
- http://www.securityfocus.com/archive/1/439031/100/0/threaded
- http://www.securityfocus.com/archive/1/439062/100/0/threaded
- http://www.securityfocus.com/archive/1/440127/100/0/threaded
- http://security.gentoo.org/glsa/glsa-200608-19.xml
- http://secunia.com/advisories/20928
- http://secunia.com/advisories/21447
- http://www.securityfocus.com/bid/18779
- http://securityreason.com/securityalert/1187
- http://www.vupen.com/english/advisories/2006/2661