homepage Welcome to WebmasterWorld Guest from 54.226.93.128
register, free tools, login, search, subscribe, help, library, announcements, recent posts, open posts,
Pubcon Platinum Sponsor 2014
Visit PubCon.com
Home / Forums Index / WebmasterWorld / Webmaster General
Forum Library, Charter, Moderators: phranque & physics

Webmaster General Forum

    
WordPress 2.1.1: the poisoned download
Distributed WP version contained cracker code
encyclo




msg:3269677
 3:03 am on Mar 3, 2007 (gmt 0)

[wordpress.org...]
If you downloaded WordPress 2.1.1 within the past 3-4 days, your files may include a security exploit that was added by a cracker (...) It was determined that a cracker had gained user-level access to one of the servers that powers wordpress.org, and had used that access to modify the download file. (...) They modified two files in WP to include code that would allow for remote PHP execution.

The patched version, 2.1.2 is available for download now from the WordPress site, and according to the developers, version 2.0 files were not affected.

WordPress 2.1.1 was released on February 21st 2007, so if you installed WordPress between then and March 2nd, you should upgrade without delay.

 

Trax




msg:3269699
 3:58 am on Mar 3, 2007 (gmt 0)

wow... this is quite heavy stuff

Moncao




msg:3269808
 8:00 am on Mar 3, 2007 (gmt 0)

Expect it (matters of the hack / crack) to get worse. Just watch the forums here. Recently people have been reporting their sites taken over (sub domains) for casino, etc.

auroinf0




msg:3269874
 10:26 am on Mar 3, 2007 (gmt 0)

hacking is common for GPL codes. Like good coders there are bad coders (bad not in skill sense) who keep working to make things hard.

MamaDawg




msg:3270117
 5:21 pm on Mar 3, 2007 (gmt 0)

Damn - I wasted hours upgrading a bundh of WP installations this week - guess I'm doing it again :(!

Thanks for the heads-up.

SuzyUK




msg:3270163
 6:47 pm on Mar 3, 2007 (gmt 0)

ouch.. thanks for heads up

I wondered why WP was down last night. I had just started setting up a 2.1.1 site - nipped in the bud thanks to this post!

Brian Harris




msg:3271831
 8:21 pm on Mar 5, 2007 (gmt 0)

interesting how they don't mention it on wordpress.org...

coopster




msg:3271931
 9:57 pm on Mar 5, 2007 (gmt 0)

Welcome to WebmasterWorld, Brian Harris.

You way want to check the link in the first message again ;)

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / WebmasterWorld / Webmaster General
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved