CVE-2014-9037
First published: Tue Nov 25 2014(Updated: )
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mageia Project Mageia | =3 | |
| Mageia Project Mageia | =4 | |
| WordPress WordPress | <=3.7.4 | |
| WordPress WordPress | =3.8 | |
| WordPress WordPress | =3.8.1 | |
| WordPress WordPress | =3.8.2 | |
| WordPress WordPress | =3.8.3 | |
| WordPress WordPress | =3.8.4 | |
| WordPress WordPress | =3.9 | |
| WordPress WordPress | =3.9.1 | |
| WordPress WordPress | =3.9.2 | |
| WordPress WordPress | =4.0 | |
| Debian Debian Linux | =7.0 | |
| Debian Debian Linux | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://advisories.mageia.org/MGASA-2014-0493.html
- http://openwall.com/lists/oss-security/2014/11/25/12
- http://www.debian.org/security/2014/dsa-3085
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:233
- http://www.securitytracker.com/id/1031243
- https://wordpress.org/news/2014/11/wordpress-4-0-1/
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/severity
- agent/remedy
- agent/weakness
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/mageia project
- canonical/mageia project mageia
- version/mageia project mageia/3
- version/mageia project mageia/4
- vendor/wordpress
- canonical/wordpress wordpress
- version/wordpress wordpress/3.7.4
- version/wordpress wordpress/3.8
- version/wordpress wordpress/3.8.1
- version/wordpress wordpress/3.8.2
- version/wordpress wordpress/3.8.3
- version/wordpress wordpress/3.8.4
- version/wordpress wordpress/3.9
- version/wordpress wordpress/3.9.1
- version/wordpress wordpress/3.9.2
- version/wordpress wordpress/4.0
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/7.0
- version/debian debian linux/8.0