PHP Vulnerability

http://news.netcraft.com/archives/2005/07/04/php_blogging_apps_vulnerable_to_xmlrpc_exploits.html
and
http://www.php.net/


PHP has a vulnerability with applications using XML RPC. Wordpress blogs are vulerable and I believe Moveable Type is safe because it uses perl. PHP has a patch/upgrade out there that will resolve the issue at:
http://qa.php.net/~derick/

The bug is VERY EASY TO EXPLOIT - so upgrade quickly.

If you are using PEAR: pear upgrade XML_RPC

 

heh thanks for the notice. need to update my dedicated servers. heh would hate to get exploited by a kiddie script. ;-)

 

I'm surprised more have not responded. Did everybody know about this one already?

 

wordpress told me about it, they gave a quick fix also with the upgrade notice.

tom