WordPress 2.6.1 SQL Column Truncation Vulnerability

neh ada vulnerability yang baru yang ada pada WP yang dimana vulnerability ini memungkinkan attacker untuk mengakses wp-admin.php. ini bisa terjadi jika admin mengijinkan ada registrasi untuk pendaftaran user baru :D

cara antisipasinya ya update tabel wp_users, dan buat user_login menjadi unique

sql:

ALTER TABLE `wp_users` ADD UNIQUE (
`user_login`
)

atau yaa di"close" ut registrasi ucer baru :D

source : http://milw0rm.com/exploits/6397
thanks to : all member k-under, milist komunitas linux indonesia

Lanjut Baca....

scanrand [the new nmap rival]

Scanrand is extremely quick and effective port scanner. It works by forking two distinct processes:
* One to send the initial queries
* One to receive responses and reconcile them from the above

Scanrand implements numerous options; reasonable defaults are selected when no specific guidance is received from the user. The only thing mandated is a target destination, which may be specified using either a FQDN(Fully Qualified Domain Name) or a numeric specification.

If you haven’t heard of the suite, Scanrand is one of the five tools in Paketto Keiretsu by Dan “Effugas” Kaminsky of Doxpara Research.

download scanrad here

the article as scanrand vs nmap

[anything you do the have a "furrow" just like the "concept" you can not run from this like "furrow" u used nmap or scanrad "if you used" this]

Lanjut Baca....