[geeklog-devel] Vulnerability found in FCKeditor

[Oliver Spiesshofer]

To that topic,

I am not sure how we are affected.

We are using version 2.3.1, this is reported for 2.4.3. I do not know if 
this is also an issue with the older version.
As a temp fix, please set

$Config['Enabled'] = false ;

in the file

/public_html/fckeditor/editor/filemanager/upload/php/config.php

this disables the upload function.

Oliver

Oliver Spiesshofer wrote:
> For those who's japanese is a bit rusty, here the original adisory
>
> http://secunia.com/advisories/27123/
>
> Oliver
>
> geeklog at mystral-kk.net wrote:
>> Hi all,
>>
>> Secunia reports a "Highly critial" vulnerability is found with
>> FCKeditor-2.4.3 (Source:
>> http://www.geeklog.jp/article.php/20071012075725463).  How will this
>> affect GL?
>>   
>
> _______________________________________________
> geeklog-devel mailing list
> geeklog-devel at lists.geeklog.net
> http://eight.pairlist.net/mailman/listinfo/geeklog-devel
>
>