Hi Gaetano, I looked at the Secunia and pn advisories and they contain no information about the exploit. Also a diff would make a fix a lot easier.
Can we please continue this discussion off list. Cheers Dave On Thu, 2005-06-30 at 12:02 +0200, Gaetano Giunta wrote: > Hello, > > I just released version 1.1.1 of phpxmlrpc on SF.net. > > The new release is intended to patch the scuirty vulnerability signaled by > GulfTech. > > Attached you can find the complete distribution of the library. I am not > providing diffs to the previous versions since I know most of the products > incorporating phpxmlrpc in fact distribute a modified version of the library. > > Please forgive me if I am mailing to the wrong person: I have no complete > list of apps that make use on phpxmlrpc, and dug out a list of > maintainers/coders to contact from the respective websites. > > Feel free to contact me for any further information. > > Bye > Gaetano Giunta -- Dave Hall (aka skwashd) API Coordinator phpGroupWare ------------------------------------------------------------------------- Do you think if Bill Gates got laid in high school, do you think there'd be a Microsoft? Of course not. Underwear Goes Inside The Pants by Lazy Boy _______________________________________________ Phpgroupware-developers mailing list Phpgroupware-developers@gnu.org http://lists.gnu.org/mailman/listinfo/phpgroupware-developers
