[Secure-testing-team] [Secure-testing-commits] r12571 - in data: . CVE

Michael S. Gilbert
2009-08-11T20:55:18Z

On Tue, 11 Aug 2009 20:45:32 +0000, Giuseppe Iuculano
wrote:
> Author: derevko-guest
> Date: 2009-08-11 20:45:32 +0000 (Tue, 11 Aug 2009)
> New Revision: 12571
>
> Modified:
>    data/CVE/list
>    data/ospu-candidates.txt
>    data/spu-candidates.txt
> Log:
> etch and lenny are not affected by wordpress password reset issue

are you sure about this?  i had checked lenny, and saw the vulnerable
bit of code in wp-login.php.

note that same code is also present in
wp-content/plugins/akismet/akismet.php.

mike