Security Patch a Must Upgrade

MasterChief · 02.02.2005, 00:47

Patches are available for Mambo Version 4.5.0-1.0.9 and Version 4.5.1a at MamboForge to counter a vulnerability within Mambo. All administrators of Mambo sites are encouraged to upgrade at their earlist convenience.

At this time we are not releasing details of how to leverage this vulnerability to protect existing sites.

bohn002 · 02.02.2005, 01:00

so what do we do with the php file?

MasterChief · 02.02.2005, 01:02

Quote:

Originally Posted by bohn002

so what do we do with the php file?

You need to replace the exisiting /includes/mambo.php file on your site with the one found in the zip patch file.

bohn002 · 02.02.2005, 01:03

perfect, you might want to add that in the notes somewhere in the zip or file info

mambovince · 02.02.2005, 01:21

Quote:

Originally Posted by MasterChief

You need to replace the exisiting /includes/mambo.php file on your site with the one found in the zip patch file.

But for version 4.5.109 sites, you replace the one in /classes/ right?

- Vince

MasterChief · 02.02.2005, 01:21

Quote:

Originally Posted by bohn002

perfect, you might want to add that in the notes somewhere in the zip or file info

Thanks. I've updated the file notes. For 4.5.0 it's a bit different. You need to replace /classes/mambo.php.

webdude · 02.02.2005, 01:52

Anyone else seeing this after the patch ? Version 4.5.1a

Fatal error: Call to undefined function: array_change_key_case() in /indybluecrew.com/html/includes/mambo.php on line 14

gene · 02.02.2005, 02:02

No - I upgraded 4.5.1a with no problems!!!

but I do have problems with some older 4.5.1.0.7 sites (yeah, I know, need to upgrade them..... but...

I receive the following error after replacing /classes/mambo.php

Warning: main(/home/.kala/seabolt1/www/woodvilletechnology.org/includes/version.php): failed to open stream: No such file or directory in /home/.kala/seabolt1/www/woodvilletechnology.org/classes/mambo.php on line 31

Warning: main(): Failed opening '/home/.kala/me/www/<sitename>/includes/version.php' for inclusion (include_path='.:/usr/local/lib/php') in /home/.kala/me/www/<sitename>/classes/mambo.php on line 31

can anyone confirm this affects the older 4.5.1.0.7 and/or 4.5.1.0.9???
thanks!!

rober · 02.02.2005, 02:03

Quote:

Originally Posted by webdude

Anyone else seeing this after the patch ? Version 4.5.1a

Fatal error: Call to undefined function: array_change_key_case() in /indybluecrew.com/html/includes/mambo.php on line 14

Yep, I did..

MasterChief · 02.02.2005, 02:07

Quote:

Originally Posted by webdude

Anyone else seeing this after the patch ? Version 4.5.1a

Fatal error: Call to undefined function: array_change_key_case() in /indybluecrew.com/html/includes/mambo.php on line 14

Shoot! Are you running on a PHP 4.1.2 server?