ATTENTION: A bad vBulletin hack has been published. Patches available

[Turboellis]

Here we go again:

A bad vBulletin hack has been published.
https://securityaffairs.co/wordpress...abilities.html

Patches available:
https://forum.vbulletin.com/forum/vb...-patch-level-2

The first vulnerability, tracked as CVE-2019-17132, is a remote code execution flaw. That is BAAAAAD. And it's being used in the wild.

Can someone notify the admins. I'm out of time on this one ...

[eine]

Do any of the admins/mods still use or look at this site? I'd be interested to know.

[Shere Khan]

Ashra was looking just yesterday. I think he used to deal with all the computing gubbins. I also thought then when we all coughed up to upgrade that meant that vBulletin were taking care of all that side of things for us?

[jay]

Maybe if the site got hacked it would liven the place up a bit

[jay]

On a more serious note don't use the same email / password combination across multiple sites.

Although I'm sure you all don't do that already right

[Turboellis]

Ashra was looking just yesterday. I think he used to deal with all the computing gubbins. I also thought then when we all coughed up to upgrade that meant that vBulletin were taking care of all that side of things for us?

Only if our site is hosted with them. Is it?

If our site is hosted on our own server, the admins will have to do the patching.

[Turboellis]

1. We know what we want to do (migrate the board to current cloud version of vbulletin, which will fix the security and stability issue). It will also future proof the board as upgrades to security/ versioning will happen automatically).

The above was from 2017?
Looks like we are now on the cloud version of vbulletin, so we should be alright as soon as vBulletin roll out the updates.

[Turboellis]

And the following message is on the previously mentioned https://forum.vbulletin.com/forum/vb...-patch-level-2
"This security patch has already been applied to all vBulletin Cloud sites."

So it looks like we're safe ...

[SirSlim]

And the following message is on the previously mentioned https://forum.vbulletin.com/forum/vb...-patch-level-2
"This security patch has already been applied to all vBulletin Cloud sites."

So it looks like we're safe ...

You can breathe out now Turbo...

[Cacapo]

Hey Ash!

Can we just hang out here? Fb creeps me out.

[Turboellis]

You can breathe out now Turbo...

I didn't even go looking for the info ... it appeared on a podcast I listen to, so I couldn't really ignore it could I?

[Xann]

Maybe if the site got hacked it would liven the place up a bit

Can we just hang out here? Fb creeps me out.

The irony being digging and sampling groups on FB with thousands of followers rate this place.