Gentoo: GLSA-202310-15 Critical: WordPress DoS and Data Risk

Gentoo Linux Security Advisory GLSA 200611-10 https://security.gentoo.org/ Severity: Normal Title: WordPress: Multiple vulnerabilities Date: November 17, 2006 Bugs: #153303 ID: 200611-10

Synopsis ======= Flaws in WordPress allow a Denial of Service, the disclosure of user metadata and the overwriting of restricted files.
Background ========= WordPress is a PHP and MySQL based multiuser blogging system.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/wordpress < 2.0.5 >= 2.0.5
========== "random" discovered that users can enter serialized objects as strings in their profiles that will be harmful when unserialized. "adapter" found out that user-edi...