CVE-2008-1930
- State
- Published
- Severity
- Not scored
- Published
- Apr 28, 2008
- Updated
- Aug 7, 2024
- Reserved
- Apr 23, 2008
Description
The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with "admin" to obtain administrator privileges, aka a "cryptographic splicing" issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 28935vdb-entry
- wordpress-cookie-security-bypass(42027)vdb-entry
- ADV-2008-1372vdb-entry
- http://www.cl.cam.ac.uk/users/sjm217/advisories/wordpress-cookie-integrity.txt
- http://wordpress.org/development/2008/04/wordpress-251/
- 1019923vdb-entry
- 29965third-party-advisory
- 20080425 Wordpress 2.5 Cookie Integrity Protection Vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.