[SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1502-1 [email protected] http://www.debian.org/security/ Noah Meyerhans February 22, 2008 http://www.debian.org/security/faq -...

CVE-2008-0194

Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete arbitrary files, and cause a denial of service via a .. dot dot in the backup parameter in a wp-db-backup.php action to wp-admin/edit.php. NOTE: this might ...

CVE-2008-0194

CVE-2008-0194 is a directory traversal vulnerability in WordPress: wp-db-backup.php (backup action to wp-admin/edit.php) allowing remote attackers to read arbitrary files, delete files, and cause a denial of service via a “..” in the backup parameter. Affected: WordPress 2.0.3 and earlier. The co...