full-disclosure - Re: WordPress OptimizePress Theme

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <52AE04B7.8010107@redhat.com>
Date: Sun, 15 Dec 2013 12:36:23 -0700
From: Kurt Seifried <kseifried@...hat.com>
To: cve-assign@...re.org, full-disclosure@...ts.grok.org.uk,
 security <security@...dpress.org>
Subject: Re: WordPress OptimizePress Theme - File Upload
	Vulnerability

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/14/2013 09:04 AM, cve-assign@...re.org wrote:
>> http://blog.sucuri.net/2013/12/wordpress-optimizepress-theme-file-upload-vulnerability.html
>
>>  
>> http://help.optimizepress.com/customer/portal/articles/1381790-important-optimizepress-1-0-security-update
>
>>  Important OptimizePress 1.0 Security Update This is an important
>> announcement for OptimizePress 1.0 users. (Please note this does
>> NOT apply to OptimizePress 2.0 which is built with a completely
>> new codebase)
> 
>> The target of the attack is the following file: 
>> lib/admin/media-upload.php. It can be used to upload any file to
>> the wp-content/uploads/optpress/images_comingsoon directory. It
>> doesn't even change the extension.
> 
>> Look for the following files: lib/admin/media-upload.php, 
>> lib/admin/media-upload-lncthumb.php, 
>> lib/admin/media-upload-sq_button.php
> 
>> Patch:
> 
>> if ( !current_user_can('add_users') ) { echo 'You cannot access
>> this file. Sorry.'; exit; }
> 
> Use CVE-2013-7102.

FYI this issue has been assigned a CVE.

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
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=r0IP
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/