XML_RPC warning for sites with Pear and PHP

"Bill Kearney" <[email protected]> Tue, 12 Jul 2005 18:21:19 -0400

Newsgroups	gmane.network.syndication.discuss,gmane.network.syndication.rss.devel
Organization	http://www.ideaspace.net/users/wkearney/foaf.xrdf
Message-ID	<[email protected]>

Hi all,

Anyone using php with pear and the xmlrpc stuff take heed.  An exploit
exists to compromise the box.

http://www.gulftech.org/?node=research&article_id=00087-07012005

Suffice to say I'd have preferred to learn this via mail, not experience.

Meanwhile, GO, right NOW, and run 'pear list-upgrades' on your machine.  If
you're on an apache/php box, that is.

If you've got the old xml_rpc module then run 'pear upgrade XML_RPC'
Seriously consider upgrading any others that have gone stale.  Being
prepared for the usual upgrade foolishness, of course.

-Bill Kearney
Syndic8.com



 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/syndication/

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/