[Secure-testing-team] [Secure-testing-commits] r12595 - in data: CVE DSA

[Giuseppe Iuculano]

Michael S. Gilbert ha scritto:
> ok, i can't find that claimed in the 2.0.10 etch package nor in any of
> the upstream announcements, and there are no code references from mitre
> to check against. perhaps i have missed something or you have verified
> against the proof-of-concept?

Yes, I checked against the PoC, but also upstream confirmed[1] that

[1]http://wordpress.org/development/2007/04/wordpress-213-and-2010/

Cheers,
Giuseppe.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20090814/29611f09/attachment.pgp>