Vulnerabilities > CVE-2007-0539 - Unspecified vulnerability in Wordpress

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

wordpress

NVD

Published: 2007-01-29

Updated: 2024-11-21

Summary

The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a large file, which triggers a long download session without a timeout constraint.

Vulnerable Configurations

Part	Description	Count
Application	Wordpress Wordpress Wordpress - Wordpress Wordpress 0.71 Wordpress Wordpress 0.72 Wordpress Wordpress 0.711 Wordpress Wordpress 1.0 Wordpress Wordpress 1.0.1 Wordpress Wordpress 1.0.2 Wordpress Wordpress 1.1.1 Wordpress Wordpress 1.2 Wordpress Wordpress 1.2.1 Wordpress Wordpress 1.2.2 Wordpress Wordpress 1.2.3 Wordpress Wordpress 1.2.4 Wordpress Wordpress 1.2.5 Wordpress Wordpress 1.3 Wordpress Wordpress 1.3.2 Wordpress Wordpress 1.3.3 Wordpress Wordpress 1.5 Wordpress Wordpress 1.5.1 Wordpress Wordpress 1.5.1.1 Wordpress Wordpress 1.5.1.2 Wordpress Wordpress 1.5.1.3 Wordpress Wordpress 1.5.2 Wordpress Wordpress 1.6.2 Wordpress Wordpress 2.0	41

Summary

Vulnerable Configurations

References