Vulnerability CVE-2011-4899 - CERT Civis.Net

Vulnerability Name:

CVE-2011-4899 (CCN-72706)

Assigned:

2011-12-23

Published:

2012-01-24

Updated:

2012-01-31

Summary:

** DISPUTED ** wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not ensure that the specified MySQL database service is appropriate, which allows remote attackers to configure an arbitrary database via the dbhost and dbname parameters, and subsequently conduct static code injection and cross-site scripting (XSS) attacks via (1) an HTTP request or (2) a MySQL query.
Note: the vendor disputes the significance of this issue; however, remote code execution makes the issue important in many realistic environments.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:U/RC:UR)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: BUGTRAQ
Type: Exploit
20120124 TWSL2012-002: Multiple Vulnerabilities in WordPress

Source: MITRE
Type: CNA
CVE-2011-4899

Source: CCN
Type: WordPress Web Site
WordPress Blog Tool, Publishing Platform, and CMS

Source: EXPLOIT-DB
Type: Exploit
18417

Source: XF
Type: UNKNOWN
wordpress-cve20114899-code-execution(72706)

Source: CCN
Type: TWSL2012-002
Multiple Vulnerabilities in WordPress

Source: MISC
Type: Exploit
https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2011-4899

Vulnerable Configuration:

Configuration 1:

cpe:/a:wordpress:wordpress:0.7:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:0.71:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:0.72:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:0.711:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.0:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.0.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.0.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.2:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.2.1:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.2.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.5:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.5.1:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.5.1.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.5.1.3:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:1.5.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.3:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.4:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.5:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.6:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.7:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.8:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.9:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.10:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.0.11:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.1.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.1.3:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.2:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.2.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.2.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.2.3:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.3:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.3.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.3.2:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.3.3:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.5:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.5.1:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.6:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.6.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.6.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.6.3:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.6.5:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.7:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.7.1:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.8:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.8.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.8.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.8.3:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.8.4:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.8.5:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.8.6:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.9:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.9.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:2.9.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.0:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.0.1:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.0.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.0.3:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.0.4:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.0.5:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.0.6:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.1.1:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.1.2:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.1.3:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.1.4:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.2.1:*:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:3.3:-:*:*:*:*:*:*

OR cpe:/a:wordpress:wordpress:*:*:*:*:*:*:*:* (Version <= 3.3.1)

Configuration CCN 1:

cpe:/a:wordpress:wordpress:3.3.1:*:*:*:*:*:*:*

AND

cpe:/a:wordpress:wordpress:-:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:com.ubuntu.bionic:def:201148990000000	V	CVE-2011-4899 on Ubuntu 18.04 LTS (bionic) - low.	2012-01-30
oval:com.ubuntu.artful:def:20114899000	V	CVE-2011-4899 on Ubuntu 17.10 (artful) - low.	2012-01-30
oval:com.ubuntu.trusty:def:20114899000	V	CVE-2011-4899 on Ubuntu 14.04 LTS (trusty) - low.	2012-01-30
oval:com.ubuntu.xenial:def:201148990000000	V	CVE-2011-4899 on Ubuntu 16.04 LTS (xenial) - low.	2012-01-30
oval:com.ubuntu.bionic:def:20114899000	V	CVE-2011-4899 on Ubuntu 18.04 LTS (bionic) - low.	2012-01-30
oval:com.ubuntu.xenial:def:20114899000	V	CVE-2011-4899 on Ubuntu 16.04 LTS (xenial) - low.	2012-01-30
oval:com.ubuntu.disco:def:201148990000000	V	CVE-2011-4899 on Ubuntu 19.04 (disco) - low.	2012-01-30
oval:com.ubuntu.cosmic:def:20114899000	V	CVE-2011-4899 on Ubuntu 18.10 (cosmic) - low.	2012-01-30
oval:com.ubuntu.cosmic:def:201148990000000	V	CVE-2011-4899 on Ubuntu 18.10 (cosmic) - low.	2012-01-30
oval:com.ubuntu.precise:def:20114899000	V	CVE-2011-4899 on Ubuntu 12.04 LTS (precise) - low.	2012-01-30