CVE-2014-9037
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2014-9037
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2014-9037.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2014-9037
- Related
- Published
- 2014-11-25T23:59:08Z
- Modified
- 2025-04-12T10:46:40Z
- Downstream
- Summary
- [none]
- Details
-
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to obtain access to an account idle since 2008 by leveraging an improper PHP dynamic type comparison for an MD5 hash.
- References
-
- http://advisories.mageia.org/MGASA-2014-0493.html
- http://www.debian.org/security/2014/dsa-3085
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:233
- https://wordpress.org/news/2014/11/wordpress-4-0-1/
- http://openwall.com/lists/oss-security/2014/11/25/12
- http://www.securitytracker.com/id/1031243
- https://security-tracker.debian.org/tracker/CVE-2014-9037
Affected packages
Debian:11 / wordpress
Package
- Name
- wordpress
- Purl
- pkg:deb/debian/wordpress?arch=source
Debian:12 / wordpress
Package
- Name
- wordpress
- Purl
- pkg:deb/debian/wordpress?arch=source
Debian:13 / wordpress
Package
- Name
- wordpress
- Purl
- pkg:deb/debian/wordpress?arch=source