[wp-hackers] xml-rpc threat ?

[Robert Deaton]

Just for future information, both of those pages are terribly
inaccurate. WordPress does not suffer from the vulnerability
described, but an XML-RPC vulerability was published for WordPress at
the same time, which led to a huge misunderstanding.

On 11/7/05, Phil Ringnalda <philringnalda at gmail.com> wrote:
> Podz wrote:
> > http://isc.sans.org/diary.php?storyid=823
> >
> > I'm assuming it's fixed, but confirmation ahead of any forum posts would
> > be nice.
>
> Buried at the bottom of the page is a link to the Security Focus
> solutions page saying that it's an attack on the vulnerability that WP
> 1.5.1.3 fixed.
>
> http://www.securityfocus.com/bid/14088/solution
>
> Phil Ringnalda
> _______________________________________________
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-hackers
>


--
--Robert Deaton
http://somethingunpredictable.com