PHPXMLRPC kütüphanesini kullanan bütün uygulamalar şu anda açığı teşkil ediyor bu açık sayesinde bu uygulamalar üzerinden aynen shell deymiş gibi komut çalıştırabiliyorsunuz phpxmlrpc kütüphanesini kullanan en popüler uygulamalar PostNuke, WordPress, Drupal, Serendipity, phpAdsNew, phpWiki ve phpMyFAQ, ayrıca rss feedlerindede
bu kütüphane kullanılıyor php.net yeni stabil php versiyonunu çıkarana kadar yapabilecekleriniz
php.net teki habere göre çıkışı yeni sürümün 11 ini bulucak 11 temmuz yani ozaman kadar yapabielcekleriniz xml desteğini kaldırırp apache yi yeniden recomplie etmeniz
karşınıza 2 türlü exploti çıkabilir php için olanı ve pear için olanı yeni bir php sürümü çıkana kadar xml desteğini kaldırmalısınız pear updateini ise yapabilrisiniz
root olarak giriş yaptıktan sonra şu komutu verin
Kod:
pear upgrade XML_RPC
mod_security kurulu ise şu 2 kuralı ekleyin
SecFilter "xmlrpc"
SecFilter "xml_rpc"
etkilenen yazılımların full listesi
Xoops Xoops 2.0.12
Xoops Xoops 2.0.11
Xoops Xoops 2.0.10
Xoops Xoops 2.0.9 .3
Xoops Xoops 2.0.9 .2
Xoops Xoops 2.0.5 .2
Xoops Xoops 2.0.5 .1
Xoops Xoops 2.0.5
Xoops Xoops 2.0.3
Xoops Xoops 2.0.2
Xoops Xoops 2.0.1
Xoops Xoops 2.0
XML-RPC for PHP XML-RPC for PHP 1.1
XML-RPC for PHP XML-RPC for PHP 1.0.99 .2
XML-RPC for PHP XML-RPC for PHP 1.0.99
XML-RPC for PHP XML-RPC for PHP 1.0 2
XML-RPC for PHP XML-RPC for PHP 1.0 1
XML-RPC for PHP XML-RPC for PHP 1.0
WordPress WordPress 1.5.1 .2
WordPress WordPress 1.5.1
WordPress WordPress 1.5
WordPress WordPress 1.2.2
WordPress WordPress 1.2.1
+ Gentoo Linux
WordPress WordPress 1.2
+ Gentoo Linux
+ Gentoo Linux 1.4
WordPress WordPress 0.71
WordPress WordPress 0.7
Ubuntu Ubuntu Linux 5.0 4 powerpc
Ubuntu Ubuntu Linux 5.0 4 i386
Ubuntu Ubuntu Linux 5.0 4 amd64
Ubuntu Ubuntu Linux 4.1 ppc
Ubuntu Ubuntu Linux 4.1 ia64
Ubuntu Ubuntu Linux 4.1 ia32
Trustix Secure Linux 2.2
Trustix Secure Linux 2.1
Trustix Secure Enterprise Linux 2.0
TikiWiki Project TikiWiki 1.8.4
+ Gentoo Linux
TikiWiki Project TikiWiki 1.8.3
TikiWiki Project TikiWiki 1.8.2
TikiWiki Project TikiWiki 1.8.1
TikiWiki Project TikiWiki 1.8
TikiWiki Project TikiWiki 1.7.9
TikiWiki Project TikiWiki 1.7.8
TikiWiki Project TikiWiki 1.7.7
TikiWiki Project TikiWiki 1.7.6
TikiWiki Project TikiWiki 1.7.5
TikiWiki Project TikiWiki 1.7.4
TikiWiki Project TikiWiki 1.7.3
TikiWiki Project TikiWiki 1.7.2
TikiWiki Project TikiWiki 1.7.1 .1
TikiWiki Project TikiWiki 1.6.1
S9Y Serendipity 0.8.1
S9Y Serendipity 0.8 -beta6 Snapshot
S9Y Serendipity 0.8 -beta6
S9Y Serendipity 0.8 -beta5
S9Y Serendipity 0.8
RedHat Fedora Core4
RedHat Fedora Core3
PostNuke Development Team PostNuke 0.76 RC4b
PostNuke Development Team PostNuke 0.76 RC4a
PostNuke Development Team PostNuke 0.76 RC4
PostNuke Development Team PostNuke 0.75
phpPgAds phpPgAds 2.0.5 RC2
phpPgAds phpPgAds 2.0
phpMyFAQ phpMyFAQ 1.5 RC4
phpMyFAQ phpMyFAQ 1.5 RC3
phpMyFAQ phpMyFAQ 1.5 RC2
phpMyFAQ phpMyFAQ 1.5 RC1
phpMyFAQ phpMyFAQ 1.5 beta3
phpMyFAQ phpMyFAQ 1.5 beta2
phpMyFAQ phpMyFAQ 1.5 beta1
phpMyFAQ phpMyFAQ 1.5 alpha2
phpMyFAQ phpMyFAQ 1.5 alpha1
phpMyFAQ phpMyFAQ 1.4.8
phpMyFAQ phpMyFAQ 1.4.7
phpMyFAQ phpMyFAQ 1.4.6
phpMyFAQ phpMyFAQ 1.4.5
phpMyFAQ phpMyFAQ 1.4.4
phpMyFAQ phpMyFAQ 1.4.3
phpMyFAQ phpMyFAQ 1.4.2
phpMyFAQ phpMyFAQ 1.4.1
phpMyFAQ phpMyFAQ 1.4 a
phpMyFAQ phpMyFAQ 1.4 -alpha 2
phpMyFAQ phpMyFAQ 1.4 -alpha 1
phpMyFAQ phpMyFAQ 1.4
PHPGroupWare PHPGroupWare 0.9.16 RC3
PHPGroupWare PHPGroupWare 0.9.16 RC2
PHPGroupWare PHPGroupWare 0.9.16 RC1
PHPGroupWare PHPGroupWare 0.9.16 .005
PHPGroupWare PHPGroupWare 0.9.16 .003
+ Gentoo Linux
PHPGroupWare PHPGroupWare 0.9.16 .002
PHPGroupWare PHPGroupWare 0.9.16 .000
PHPGroupWare PHPGroupWare 0.9.14 .007
PHPGroupWare PHPGroupWare 0.9.14 .006
PHPGroupWare PHPGroupWare 0.9.14 .005
PHPGroupWare PHPGroupWare 0.9.14 .004
PHPGroupWare PHPGroupWare 0.9.14 .003
PHPGroupWare PHPGroupWare 0.9.14 .002
PHPGroupWare PHPGroupWare 0.9.14 .001
PHPGroupWare PHPGroupWare 0.9.14
PHPGroupWare PHPGroupWare 0.9.13
- Debian Linux 2.2
PHPGroupWare PHPGroupWare 0.9.12
- Conectiva Linux 7.0
- Conectiva Linux 8.0
- Conectiva Linux 9.0
- MySQL AB MySQL 3.23.31
- MySQL AB MySQL 3.23.34
- MySQL AB MySQL 3.23.36
- PostgreSQL PostgreSQL 6.3.2
- PostgreSQL PostgreSQL 6.5.3
phpAdsNew phpAdsNew 2.0.4 -pr2
phpAdsNew phpAdsNew 2.0.4 -pr1
phpAdsNew phpAdsNew 2.0 beta 6
phpAdsNew phpAdsNew 2.0 beta 5
phpAdsNew phpAdsNew 2 dev 30092001
phpAdsNew phpAdsNew 2 dev 09102001
PHP-Wiki PHP-Wiki 1.3.11 _rc3
PHP-Wiki PHP-Wiki 1.3.11 _rc2
PHP-Wiki PHP-Wiki 1.3.10
PHP-Wiki PHP-Wiki 1.3.9
PHP-Wiki PHP-Wiki 1.3.3
PHP-Wiki PHP-Wiki 1.3.2
PHP-Wiki PHP-Wiki 1.3.1
PHP-Wiki PHP-Wiki 1.2.2
PHP-Wiki PHP-Wiki 1.2.1
PHP-Wiki PHP-Wiki 1.2
PEAR XML_RPC 1.3 RC3
PEAR XML_RPC 1.3 RC2
PEAR XML_RPC 1.3 RC1
PEAR XML_RPC 1.3
Nucleus CMS Nucleus CMS 3.2
Nucleus CMS Nucleus CMS 3.1
Nucleus CMS Nucleus CMS 3.0 RC
Nucleus CMS Nucleus CMS 3.0 1
Nucleus CMS Nucleus CMS 3.0
MandrakeSoft Linux Mandrake 10.2 x86_64
MandrakeSoft Linux Mandrake 10.2
MandrakeSoft Linux Mandrake 10.1 x86_64
MandrakeSoft Linux Mandrake 10.1
MandrakeSoft Linux Mandrake 10.0 amd64
MandrakeSoft Linux Mandrake 10.0
MandrakeSoft Corporate Server 3.0 x86_64
MandrakeSoft Corporate Server 3.0
MailWatch for MailScanner MailWatch for MailScanner 1.0
MailWatch for MailScanner MailWatch for MailScanner 0.5.1
MailWatch for MailScanner MailWatch for MailScanner 0.5
MailWatch for MailScanner MailWatch for MailScanner 0.4
eGroupWare eGroupWare 1.0.6
eGroupWare eGroupWare 1.0.3
eGroupWare eGroupWare 1.0.1
eGroupWare eGroupWare 1.0 .0.007
Drupal Drupal 4.6.1
Drupal Drupal 4.6
Drupal Drupal 4.5.3
Drupal Drupal 4.5.2
Drupal Drupal 4.5.2
Drupal Drupal 4.5.1
Drupal Drupal 4.5
CivicSpace Labs CivicSpace 0.8.1
CivicSpace Labs CivicSpace 0.8 .0.5
CivicSpace Labs CivicSpace 0.8 .0.4
CivicSpace Labs CivicSpace 0.8 .0.3
CivicSpace Labs CivicSpace 0.8 .0.2
CivicSpace Labs CivicSpace 0.7.2
BLOG:CMS BLOG:CMS 3.6.4
BLOG:CMS BLOG:CMS 3.6.2
redhat ta update bilgisi
[Bu Linki Görüntüleyebilmeniz İçin Üye Olmanız Gerekiyor. (
[Bu Linki Görüntüleyebilmeniz İçin Üye Olmanız Gerekiyor. )
rhn dede update çıktı
root@root [/usr/local/apache/logs]# up2date -u
Invalid metapkg id emacs-nox
Fetching Obsoletes list for channel: rhel-i386-es-3...
########################################
Fetching Obsoletes list for channel: rhel-i386-es-3-extras...
Fetching rpm headers...
Name Version Rel
----------------------------------------------------------
The following Packages were marked to be skipped by your configuration:
Name Version Rel Reason
-------------------------------------------------------------------------------
kernel 2.4.21 32.0.1.ELPkg name/pattern
kernel-doc 2.4.21 32.0.1.ELPkg name/pattern
kernel-smp 2.4.21 32.0.1.ELPkg name/pattern
kernel-source 2.4.21 32.0.1.ELPkg name/pattern
kernel-utils 2.4 8.37.12Pkg name/pattern
php 4.3.2 24.entPkg name/pattern
php-imap 4.3.2 24.entPkg name/pattern
php-ldap 4.3.2 24.entPkg name/pattern
php-mysql 4.3.2 24.entPkg name/pattern
All packages are currently up to date
hernekadar redhatın builtin paketlerine pek güvenim yok bence php.net i beklemek en iyisi
Benzer Konular
XML RPC Exploiti hakkında genel bilgi yapılması gerekenler
Normal
