FYI wordpress vulnerability...

[bootNumlock]

not even sure if wordpress runs on any of our servers, but thought people should see this...

http://securitywatch.eweek.com/explo...EMNL030507EOAD

[Brangwyn]

Thanks for the heads up

[Ballyhoo]

Originally Posted by Brangwyn

Thanks for the heads up

What he said.

And yes it does run here at VT. I have several going. Works good and is easy to install.

[Vidvandre]

Originally posted at WordPress.org on the 3rd of March
Long story short: If you downloaded WordPress 2.1.1 within the past 3-4 days, your files may include a security exploit that was added by a cracker, and you should upgrade all of your files to 2.1.2 immediately.

Ouch!
Anybody running WP should definitively read the information posted on WP.org and upgrade immediately...

[Ballyhoo]

Well personally I'm running 2.0.5 so I'll wait to make sure the gremlins are all worked out.

[Vidvandre]

Originally Posted by Ballyhoo

Well personally I'm running 2.0.5 so I'll wait to make sure the gremlins are all worked out.

This wasn't so much as a bug in WP, as it was a hacker breaking into WP.org's server and adding some "unusual and highly exploitable code in WordPress"...

Originally posted at WordPress.org on the 3rd of March
It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. (...) They modified two files in WP to include code that would allow for remote PHP execution.

Edit: Fixed some issues with the quotes...