On Tue, 11 Aug 2009 20:45:32 +0000, Giuseppe Iuculano wrote:
> Author: derevko-guest
> Date: 2009-08-11 20:45:32 +0000 (Tue, 11 Aug 2009)
> New Revision: 12571
> 
> Modified:
>    data/CVE/list
>    data/ospu-candidates.txt
>    data/spu-candidates.txt
> Log:
> etch and lenny are not affected by wordpress password reset issue

are you sure about this?  i had checked lenny, and saw the vulnerable
bit of code in wp-login.php.

note that same code is also present in
wp-content/plugins/akismet/akismet.php.

mike

_______________________________________________
Secure-testing-team mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-team

Reply via email to