vBulletin.com Forums Hacked

[ozzy47]

Maybe it was done via that ipv6 issue that was talked about in another topic.

Nah, vB5 has that issue fixed.

 

[Danielx64]

Nah, vB5 has that issue fixed.

Thank you for the heads up

Next on my list, is it just me that I dont like the idea of having a login form inside an Iframe? I consider that a security risk.

 

[VICE]

... super Joe ...

Please quit using your pet names for everyone. Use their forum name when referencing someone. It just makes you look immature when you do that.

Ziggy, I would henceforth consider your demand void.

Not to diminish the likelihood of B (e.g., SQLI etc.), but A is how a lot of breaches are starting these days at large companies. They introduce malware on a person's computer who has administrative or root access and then they have access to whatever that person has access to. It's a lot simpler than some other approaches. Is the code base for VB5 at all similar to VB4 or 3? I know it could be a plug-in or any other software but am just curious.

With only a handful of well seasoned developers?
I would like to assume their PCs are well protected.

 

[ozzy47]

Not to diminish the likelihood of B (e.g., SQLI etc.), but A is how a lot of breaches are starting these days at large companies. They introduce malware on a person's computer who has administrative or root access and then they have access to whatever that person has access to. It's a lot simpler than some other approaches. Is the code base for VB5 at all similar to VB4 or 3? I know it could be a plug-in or any other software but am just curious.

It's possible, but I would be willing to bet it was a vB5 exploit.

 

[Dakoom]

In the next days I'll upload my vB 3.8.9 forum to my server. Should I be worried?

*

I would like to assume their PCs are well protected.

Probably there are some super good deleoping with server languages but noobs when it came to pc security.

 

[VICE]

Probably there are some super good deleoping with server languages but nerds when it came to pc security.

My bet would be on the legacy codes.
[vB5] Being refactored from vB4, I assume there are many of those around.

 

[PacMan]

My bet would be on the legacy codes.
[vB5] Being refactored from vB4, I assume there are many of those around.

... which was refactored from VB3

 

[ozzy47]

... which was refactored from VB3

I think it was a version specific (v5.1.9) issue. As what ever was done has only happened to the forums and home page. The members area still works, although I would not log in there till everything is sorted.

 

[doubt]

Critical Error
We are currently experiencing technical difficulties. Please check back in 24 hours.

 

[PacMan]

I think it was a version specific (v5.1.9) issue. As what ever was done has only happened to the forums and home page. The members area still works, although I would not log in there till everything is sorted.

So are you saying that the member area is based on VB3 code?

 

[ozzy47]

So are you saying that the member area is based on VB3 code?

No, but if there were other exploits in other versions, more than just the forum and homepage would.be affected,

 

[ozzy47]

Seems like it is back up and running now.

 

[rudedog]

Forums are down for me. I can access the front page but not the forums

 

[ozzy47]

Forums are down for me. I can access the front page but not the forums

Maybe clear your cache? The forums are showing for me.

 

[zappaDPJ]

The forums are definitely up and running again but there's no announcement about the attack.

 

[highlander29]

Maybe clear your cache? The forums are showing for me.

That works

 

[rudedog]

Maybe clear your cache? The forums are showing for me.

Correct, forums are now up for me too.

 

[ozzy47]

The forums are definitely up and running again but there's no announcement about the attack.

I bet you won't hear anything for awhile.

 

[highlander29]

I bet you won't hear anything for awhile.

I posted a question in their Site Feedback forum.

http://www.vbulletin.com/forum/foru...back/4332098-how-secure-is-vbulletin-software

 

[ozzy47]

LOL, it took Brogan about a minute to close the thread on XF site, https://xenforo.com/community/threads/vbulletin-com-hacked.107737/