WordPress 2.1.1 Was cracked

Discussion in 'Security' started by dshah, May 4, 2007.

  1. #1
    Its unbelievable, but true. Some cracker gained access to wordpress.org SVN and modified files to inject exploit. So anyone who has above mentioned version has got a backdoor in to their wordpress files.

    I found out when scanned my computer with symantec scanner (security.symantec.com) (read more about it here). Which later I verified with wordpress.org announcment (here)

    Make sure you upgrade immediately.
     
    dshah, May 4, 2007 IP
  2. imnotadoctor

    imnotadoctor Well-Known Member

    Messages:
    415
    Likes Received:
    10
    Best Answers:
    0
    Trophy Points:
    140
    #2
    Here we go again!
     
    imnotadoctor, May 4, 2007 IP
  3. ThreeGuineaWatch

    ThreeGuineaWatch Well-Known Member

    Messages:
    1,489
    Likes Received:
    69
    Best Answers:
    0
    Trophy Points:
    140
    #3
    It almost as unbelievable that you've only just heard about it. ;) I realise your intentions are highly commendable, but if you had read the links you included you may have noticed it is an 8 week old "news" story. :D
     
    ThreeGuineaWatch, May 4, 2007 IP
  4. yogesh sarkar

    yogesh sarkar Well-Known Member

    Messages:
    1,740
    Likes Received:
    75
    Best Answers:
    0
    Trophy Points:
    140
    #4
    Old news, but should help those who haven't yet upgraded wordpress
     
    yogesh sarkar, May 4, 2007 IP
  5. dshah

    dshah Well-Known Member

    Messages:
    1,840
    Likes Received:
    69
    Best Answers:
    0
    Trophy Points:
    115
    #5
    aaah, silly me. Didn't notice the date. But hey its news for me :). I scanned my laptop today and was hit by this. Its scary to see wordpress.org could be cracked.
     
    dshah, May 4, 2007 IP
  6. darksat

    darksat Guest

    Messages:
    1,239
    Likes Received:
    16
    Best Answers:
    0
    Trophy Points:
    0
    #6
    The exploit code is fairly simple as well.
    Not exactly a hard crack to implement, and thats whats worrying.
     
    darksat, May 13, 2007 IP
  7. randomIntellections

    randomIntellections Well-Known Member

    Messages:
    985
    Likes Received:
    13
    Best Answers:
    0
    Trophy Points:
    180
    #7
    its not cracking but exploiting :)
     
    randomIntellections, May 13, 2007 IP