On the LinuxDevCenter, there's a new article posted with a few security issues that effects a lot of users out there - issues with: Linux kernel, Mac OS X, bzip2, WordPress, WebSphere, Peercast, PHPMailer, Binutils, Popper Webmail, Dzip, and FreeBSD's gzip.
Of the ones mentioned, Wordpress, PHPMailer, and Popper Webmail are the PHP-related ones:
- Wordpress - Multiple problems in WordPress may, under some conditions, be exploitable by a remote attacker in a SQL injection attack, or in a cross-site, scripting-based attack.
- PHPMailer - A remotely exploitable denial-of-service vulnerability has been reported in PHPMailer. The vulnerability is caused by a bug in the SMTP-Class Data() function.
- Popper Webmail - vulnerable to an attack that can be exploited by a remote attacker to execute arbitrary code with the permissions of the user account running the web server. The vulnerability is caused by a bug in the file childwindow.inc.php. This vulnerability is reported to affect all versions of Popper Webmail through version 1.41-r2.
So, if you're currently running any of these applications, you need to check the versions to ensure that you're not at risk. All three applications have corrected the problems with new, updated versions...




