vBulletin 0day

[mmmm21 98]

Ostatnio zostało pozamykanych kilka for opartych na vBulletin i oczekują na pojawienie się poprawek, szczegółowe informacje http://thehackernews.com/2013/11/vBulletin-hacked-Zero-Day-vulnerability.html

Edytowano Listopad 19, 2013 przez mmmm21 (zobacz historię edycji)

[PapaSmerf 497]

Forów.

 

Chyba dodatkowo też ich baza klientów wyciekła, dostałem email o konieczności zmiany hasła.

[Lokator 137]

 

Regarding claims of New 0-Day Exploits in vBulletin.

Yesterday, 12:15pm

Given our analysis of the evidence provided by the Inject0r team, we do not believe that they have uncovered a 0-day vulnerability in vBulletin.

 

These hackers were able to compromise an insecure system that was used for testing vBulletin mobile applications. The best defense against potential compromises is to keep your system running on the very latest patch release of the software.

 

Regards,

Wayne Luke.

 

Źródło: http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4007719-regarding-claims-of-new-0-day-exploits-in-vbulletin

 

 

Important Message Regarding Your Account

Fri 15th Nov '13, 7:36pm

This is an important message about your account.

 

We take your security and privacy very seriously. Very recently, our security team discovered sophisticated attacks on our network, involving the illegal access of forum user information, possibly including your password. Our investigation currently indicates that the attackers accessed customer IDs and encrypted passwords on our systems. We have taken the precaution of resetting your account password. We apologize for any inconvenience this has caused but felt that it was necessary to help protect you and your account.

 

To regain access to your account:

1. Visit the vBulletin forums at http://www.vbulletin.com/forum/settings/account
2. Enter in your existing password followed by your new password, twice for confirmation.
3. Save this page at the bottom.

Please choose a new password and do not use the same password you used with us previously. We also highly recommend that you chose a password that you are not using on any other sites.

If you have any additional questions or concerns, please feel free to contact our support team at http://www.vbulletin.com/go/techsupport or support@vbulletin.com

 

Sincerely,

Wayne Luke,

vBulletin Lead Technical Support.

 

Źródło: http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4007195-important-message-regarding-your-account