CVE-2005-2109

Publication date 5 July 2005

Last updated 24 July 2024


Ubuntu priority

wp-login.php in WordPress 1.5.1.2 and earlier allows remote attackers to change the content of the forgotten password e-mail message via the message variable, which is not initialized before use.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
wordpress 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected