What’s Vulnerable › Vulnerabilities

CVE-2008-4106

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-09-18 · updated 2026-06-16
• Weakness: CWE-20

Description

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the user_login column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's password to a random value by registering a similar username and then requesting a password reset, related to a "SQL column truncation vulnerability." NOTE: the attacker can discover the random password by also exploiting CVE-2008-4107.

Affected products

• WordPress: through 2.6.1; 0.71-gold, 1.0-platinum, 1.0.1-miles, 1.0.2-blakey, 1.2-delta, 1.2-mingus (+27)

References

• http://marc.info/?l=oss-security&m=122152830017099&w=2
• http://secunia.com/advisories/31737
• http://secunia.com/advisories/31870
• http://securityreason.com/securityalert/4272
• http://securitytracker.com/id?1020869
• http://wordpress.org/development/2008/09/wordpress-262/
• http://www.debian.org/security/2009/dsa-1871
• http://www.openwall.com/lists/oss-security/2008/09/11/6
• http://www.securityfocus.com/archive/1/496287/100/0/threaded
• http://www.securityfocus.com/bid/31068
• http://www.sektioneins.de/advisories/SE-2008-05.txt
• http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/

Get alerted when CVE-2008-4106 or the next vulnerability affects your stack