Wordpress worm released

Posted: Thu Aug 02, 2007 5:56 pm

Interested to patch your current blog version with a friendly worm before there is a new version of wordpress out ?

Check this:

http://mybeni.rootzilla.de/mybeNi/

Many guys have already patched their blogs but as far as I know there is no official statement about these new 7 security holes from the wordpress team.

registered · Site Admin Joined: Jun 04, 2004 Posts: 6437

Scary...

registered · Posted: Thu Aug 02, 2007 9:02 pm

Going to check this out now.. none of the referenced sites are in English though. Oh well, time to patch it up

Posted: Thu Aug 02, 2007 9:51 pm

Went ahead and rewrote the changes in English, verified them on my Wordpress install
http://evaders.swrebellion.com/forums/postp401.html#401

Feel free to use this or the pre-packaged files

Posted: Fri Aug 03, 2007 4:31 pm

Oh, thats really a big thing Smile

www.symantec.com wrote also something about this worm.
The strange thing was that there was no message to chmod the files. I used it twice and its good that I checked my files and the authors site again otherwise I wouldn´t know that there are small changes required for some files after the friendly worm did his job.

Trust is good, control is better.

Posted: Mon Aug 06, 2007 7:48 am

Yea I wouldn't trust a worm to use the same vulnerability to patch it. It's like the hackers that only want to "improve your security"... right.. Wink