lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <52AE04B7.8010107@redhat.com> Date: Sun, 15 Dec 2013 12:36:23 -0700 From: Kurt Seifried <kseifried@...hat.com> To: cve-assign@...re.org, full-disclosure@...ts.grok.org.uk, security <security@...dpress.org> Subject: Re: WordPress OptimizePress Theme - File Upload Vulnerability -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 12/14/2013 09:04 AM, cve-assign@...re.org wrote: >> http://blog.sucuri.net/2013/12/wordpress-optimizepress-theme-file-upload-vulnerability.html > >> >> http://help.optimizepress.com/customer/portal/articles/1381790-important-optimizepress-1-0-security-update > >> Important OptimizePress 1.0 Security Update This is an important >> announcement for OptimizePress 1.0 users. (Please note this does >> NOT apply to OptimizePress 2.0 which is built with a completely >> new codebase) > >> The target of the attack is the following file: >> lib/admin/media-upload.php. It can be used to upload any file to >> the wp-content/uploads/optpress/images_comingsoon directory. It >> doesn't even change the extension. > >> Look for the following files: lib/admin/media-upload.php, >> lib/admin/media-upload-lncthumb.php, >> lib/admin/media-upload-sq_button.php > >> Patch: > >> if ( !current_user_can('add_users') ) { echo 'You cannot access >> this file. Sorry.'; exit; } > > Use CVE-2013-7102. FYI this issue has been assigned a CVE. - -- Kurt Seifried Red Hat Security Response Team (SRT) PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iQIcBAEBAgAGBQJSrgS3AAoJEBYNRVNeJnmTa7wP/1EjYhv5lY1y2S38RCafWtow jy4DT2rf0CrJKi256u/0667DFa46PrRbu34kXu2b+tjgBlx5/gSORND2jIvcSnti dAfRP2q1abGVe0pkbRN8bUINwTS9ITag0ec4pwBVT/4ct9Xmnqi1xgUfuzLca2Vm skjwcW6elbe4L1jEWGqxaC5umPkprKDcq98hCu57CZPhG1Gf2nmA05Icl5YXw7s9 dL7y/VDXkfM66bQfOkceB3SdfktsyI6MC8OLax+mzRr4+Pa3mnlZ12yOr4XDxd3n mlg3pbF+6/vioQM5Qp36iLJ2fINKL9eAtwv/8O40LrwN0QQXQbP9efg/VPzOzztC Dl849SYKfPB5ZAV1bkEZJHkog3WVxMC2f5c/Na/ive4I0iDzrykZA7pydqHd3JcV iwtiIlwqaw4NP+zVi+WOWxpUxlZy3lPPDE8VpvCcEMPQTW8G+MhhLCB098Zr+S04 GGrnmXWiw0pSYHM+DzrqQcHSZon9n17YHAZyc+gYAI4WN/sEhi+tVwlAQacYn9CB FxirWZMR45E9fEbEQtQ4En5zLmgQuY3VMBByqf4eGh111cSvE8fg36TFUtH0H+Od G8HYpUfSXvkkOQa6J13Ve54FK75UCz1jTyvj8XcLZ3kiJm2BfTebwftltnypNgGL VvS3QQNAc5ZeOfGX1i+6 =r0IP -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists