Looking for more information on how to do PHP the right way? Check out PHP: The Right Way

LinuxDevCenter:
Security Issues - Wordpress, PHPMailer, and Popper Webmail
Jun 19, 2005 @ 23:07:10

On the LinuxDevCenter, there's a new article posted with a few security issues that effects a lot of users out there - issues with: Linux kernel, Mac OS X, bzip2, WordPress, WebSphere, Peercast, PHPMailer, Binutils, Popper Webmail, Dzip, and FreeBSD's gzip.

Of the ones mentioned, Wordpress, PHPMailer, and Popper Webmail are the PHP-related ones:

  • Wordpress - Multiple problems in WordPress may, under some conditions, be exploitable by a remote attacker in a SQL injection attack, or in a cross-site, scripting-based attack.
  • PHPMailer - A remotely exploitable denial-of-service vulnerability has been reported in PHPMailer. The vulnerability is caused by a bug in the SMTP-Class Data() function.
  • Popper Webmail - vulnerable to an attack that can be exploited by a remote attacker to execute arbitrary code with the permissions of the user account running the web server. The vulnerability is caused by a bug in the file childwindow.inc.php. This vulnerability is reported to affect all versions of Popper Webmail through version 1.41-r2.

So, if you're currently running any of these applications, you need to check the versions to ensure that you're not at risk. All three applications have corrected the problems with new, updated versions...

tagged:

Link:


Trending Topics: