[wp-trac] [WordPress Trac] #10735: CVE-2008-6767 patch: Only admin can upgrade wordpress

WordPress Trac wp-trac at lists.automattic.com
Sun Sep 6 12:06:10 UTC 2009


#10735: CVE-2008-6767 patch: Only admin can upgrade wordpress
-----------------------------+----------------------------------------------
 Reporter:  Derevko          |       Owner:            
     Type:  defect (bug)     |      Status:  new       
 Priority:  normal           |   Milestone:  Unassigned
Component:  Upgrade/Install  |     Version:            
 Severity:  normal           |    Keywords:            
-----------------------------+----------------------------------------------
 Hi,

 with the trivial attached patch I fixed CVE-2008-6767 in wordpress debian
 package:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6767

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10735>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list