[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
dsa-1285
 やã�¾ã�ã�§ã�™ã€‚
 dsa-1285 を訳ã�—ã�¦ã�¿ã�¾ã�—ã�Ÿã€‚査èªã��ã� ã�•ã�„。
#use wml::debian::translation-check translation="1.1"
<define-tag description>Ê£¿ô¤ÎÀȼåÀ</define-tag>
<define-tag moreinfo>
<ul>
<li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1622">CVE-2007-1622</a>
<p>WordPress 2.0.10 RC2 °ÊÁ°¡¢2.1 ·Ï¤Ç¤Ï WordPress 2.1.3 RC2 °ÊÁ°¤Î wp-admin/vars.php
¤Ë¥¯¥í¥¹¥µ¥¤¥È¥¹¥¯¥ê¥×¥Æ¥£¥ó¥° (XSS) ÀȼåÀ¤¬¤¢¤ê¡¢¥ê¥â¡¼¥È¤«¤é¥Æ¡¼¥ÞÀßÄ긢¸Â¤òͤ·¤Æ¤¤¤ë
ǧ¾ÚºÑ¤ß¤Î¥æ¡¼¥¶¤¬´ÉÍý²èÌÌ¤Ë¤Æ PATH_INFO ¤òÍøÍѤ·¤ÆÇ¤°Õ¤Î web ¥¹¥¯¥ê¥×¥È¤ä HTML
¤òÁÞÆþ²Äǽ¤È¤Ê¤Ã¤Æ¤¤¤Þ¤¹¡£¤³¤ì¤Ï PHP_SELF ¤ÎÀµµ¬É½¸½½èÍý¤¬´Ë¤¤¤¿¤á¤Ç¤¹¡£</p></li>
<li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1893">CVE-2007-1893</a>
<p>WordPress 2.1.2 ¤ª¤è¤Ó¤ª¤½¤é¤¯¤½¤ì°ÊÁ°¤Î¥Ð¡¼¥¸¥ç¥ó¤Ç¡¢¥ê¥â¡¼¥È¤«¤é contributor
¸¢¸Â¤òͤ·¤¿Ç§¾ÚºÑ¤ß¤Î¥æ¡¼¥¶¤¬°Õ¿Þ¤·¤¿¥¢¥¯¥»¥¹À©¸Â¤ò̵»ë¤·¤Æ<q>°ÊÁ°¤ËÊݸ¤µ¤ì¤¿Åê¹Æ¤ò¸ø³«¤¹¤ë
(publish a previously saved post)</q>
¤Î¤Ë»È¤ï¤ì¤ë publish_posts µ¡Ç½¤òµ¯Æ°¤¹¤ë¤³¤È¤¬²Äǽ¤È¤Ê¤ê¤Þ¤¹¡£</p></li>
<li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1894">CVE-2007-1894</a>
<p>WordPress 20070309 °ÊÁ°¤Î wp-includes/general-template.php
¤Ë¥¯¥í¥¹¥µ¥¤¥È¥¹¥¯¥ê¥×¥Æ¥£¥ó¥° (XSS) ÀȼåÀ¤¬¤¢¤ê¤Þ¤¹¡£¤³¤ì¤Ë¤è¤ê¡¢
¥ê¥â¡¼¥È¤«¤é¹¶·â¼Ô¤¬ wp_title ´Ø¿ôÃæ¤Î year ¥Ñ¥é¥á¡¼¥¿·Ðͳ¤ÇǤ°Õ¤Î
web ¥¹¥¯¥ê¥×¥È¤ä HTML ¤òÁÞÆþ²Äǽ¤È¤Ê¤Ã¤Æ¤¤¤Þ¤¹¡£</p></li>
<li><a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1897">CVE-2007-1897</a>
<p>WordPress 2.1.2 ¤ª¤è¤Ó¤ª¤½¤é¤¯¤½¤ì°ÊÁ°¤Î¥Ð¡¼¥¸¥ç¥ó¤Ë¤Ï xmlrpc.php Ãæ¤Ë
SQL ¥¤¥ó¥¸¥§¥¯¥·¥ç¥ó ÀȼåÀ¤¬¤¢¤ê¤Þ¤¹¡£¤³¤ì¤Ë¤è¤ê¡¢¥ê¥â¡¼¥È¤«¤éǧ¾ÚºÑ¤ß¤Î¥æ¡¼¥¶¤¬
post_id ÊÑ¿ô¤Ë´ØÏ¢¤·¤¿ XML RPC ¤Î mt.setPostCategories ¥á¥½¥Ã¥É¸Æ¤Ó½Ð¤·»þ¤Ë
ʸ»úÎó¥Ñ¥é¥á¡¼¥¿ÃÍ·Ðͳ¤ÇǤ°Õ¤Î SQL ¥³¥Þ¥ó¥É¤ò¼Â¹Ô²Äǽ¤È¤Ê¤Ã¤Æ¤¤¤Þ¤¹¡£</p></li>
</ul>
<p>°ÂÄêÈǥǥ£¥¹¥È¥ê¥Ó¥å¡¼¥·¥ç¥ó (stable, ¥³¡¼¥É¥Í¡¼¥à etch) ¤Ç¤Ï¡¢
¤³¤ì¤é¤ÎÌäÂê¤Ï¥Ð¡¼¥¸¥ç¥ó 2.0.10-1 ¤Ç½¤Àµ¤µ¤ì¤Æ¤¤¤Þ¤¹¡£</p>
<p>¥Æ¥¹¥ÈÈǥǥ£¥¹¥È¥ê¥Ó¥å¡¼¥·¥ç¥ó (testing¡¢¥³¡¼¥É¥Í¡¼¥à lenny)
¤ª¤è¤ÓÉÔ°ÂÄêÈǥǥ£¥¹¥È¥ê¥Ó¥å¡¼¥·¥ç¥ó (unstable¡¢¥³¡¼¥É¥Í¡¼¥à sid)
¤Ç¤Ï¡¢¤³¤ì¤é¤ÎÌäÂê¤Ï¥Ð¡¼¥¸¥ç¥ó 2.1.3-1 ¤Ç½¤Àµ¤µ¤ì¤Æ¤¤¤Þ¤¹¡£</p>
<p>wordpress ¥Ñ¥Ã¥±¡¼¥¸¤Î¥¢¥Ã¥×¥°¥ì¡¼¥É¤ò¤ª´«¤á¤·¤Þ¤¹¡£</p>
</define-tag>
# do not modify the following line
#include "$(ENGLISHDIR)/security/2007/dsa-1285.data"