update wordpress, phpadsnew, postnuke - remote code execution - GoFuckYourself.com

darksoul · 07-04-2005, 11:33 PM

Theres a php xml vulnerability that allows remote code execution.
The vulnerability is found in php's xml-rpc implementation and in many
php software packages that implement their own xml-rpc library.
I think many of you use wordpress, phpadsnew, postnuke and should
start upgrading asap or urge your host to do so.
I've tested it on several installations and
the bug is very serious don't ignore this.

http://news.netcraft.com/archives/20...xploits.ht ml
http://www.securityfocus.com/bid/14088/info

Today is gonna be a long day... get to work

newbreed · 07-04-2005, 11:34 PM

Thanks for the tip Man.

azguy · 07-04-2005, 11:35 PM

darksoul · 07-04-2005, 11:40 PM

while your at it, make sure your phpBB'es are up2date as well.
Theres a remote code execution vulnerability in versions prior to 2.0.16
Theres enough stuff for a new worm.

darksoul · 07-05-2005, 01:28 AM

keep this fucker up.

freesexxwebsite · 07-05-2005, 02:19 AM

thanks i have to update my nuke site

TexasDreams · 07-05-2005, 04:29 AM

Bumpity bump. Thanks for the heads up on this!!!

I'm all patched up now.

Rui · 07-05-2005, 04:39 AM

Thanks for letting us know, hard to keep with so much stuff nowadays.

Cheers

07-04-2005, 11:33 PM	#1
darksoul Confirmed User Join Date: Apr 2002 Location: /root/ Posts: 4,997	update wordpress, phpadsnew, postnuke - remote code execution Theres a php xml vulnerability that allows remote code execution. The vulnerability is found in php's xml-rpc implementation and in many php software packages that implement their own xml-rpc library. I think many of you use wordpress, phpadsnew, postnuke and should start upgrading asap or urge your host to do so. I've tested it on several installations and the bug is very serious don't ignore this. http://news.netcraft.com/archives/20...xploits.ht ml http://www.securityfocus.com/bid/14088/info Today is gonna be a long day... get to work __________________ 1337 5y54\|)m1n: 157717888 BM-2cUBw4B2fgiYAfjkE7JvWaJMiUXD96n9tN Cambooth

07-04-2005, 11:34 PM	#2
newbreed Confirmed User Join Date: Nov 2003 Location: ThatOneProgram.com Posts: 9,898	Thanks for the tip Man. __________________ Want to promote SUCCUBUS? Click HERE!!!! \| Want to buy SUCCUBUS? Click HERE!!!! Yeah, yeah, you know, That One Program! \| Want to trade links with StompBunny.com? Loryn ‎(3:16 PM): I love it, just as long as we keep the bedroom door closed from all ears then we can have throw down hard core sex that makes us money haha fuck it we can have sex on money never did that before

07-04-2005, 11:40 PM	#4
darksoul Confirmed User Join Date: Apr 2002 Location: /root/ Posts: 4,997	while your at it, make sure your phpBB'es are up2date as well. Theres a remote code execution vulnerability in versions prior to 2.0.16 Theres enough stuff for a new worm. __________________ 1337 5y54\|)m1n: 157717888 BM-2cUBw4B2fgiYAfjkE7JvWaJMiUXD96n9tN Cambooth

07-05-2005, 01:28 AM	#5
darksoul Confirmed User Join Date: Apr 2002 Location: /root/ Posts: 4,997	keep this fucker up. __________________ 1337 5y54\|)m1n: 157717888 BM-2cUBw4B2fgiYAfjkE7JvWaJMiUXD96n9tN Cambooth

07-05-2005, 04:29 AM	#7
TexasDreams former Miserable Admin :) Join Date: Oct 2003 Location: Somewhere in Cali Posts: 4,700	Bumpity bump. Thanks for the heads up on this!!! I'm all patched up now. __________________ ICQ: 168-914-369 >>> sysop [at] TexasDreams [dot] com

07-04-2005, 11:35 PM	#3
azguy Confirmed User Join Date: Nov 2004 Location: Scottsdale, AZ Posts: 5,167

07-05-2005, 02:19 AM	#6
freesexxwebsite Confirmed User Join Date: Jun 2005 Posts: 2,845	thanks i have to update my nuke site

07-05-2005, 04:39 AM	#8
Rui web Join Date: Dec 2001 Location: On icq: 85-483-060 Posts: 9,533	Thanks for letting us know, hard to keep with so much stuff nowadays. Cheers