Announcement

Collapse
No announcement yet.

ATTENTION: A bad vBulletin hack has been published. Patches available

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • ATTENTION: A bad vBulletin hack has been published. Patches available

    Here we go again:

    A bad vBulletin hack has been published.
    https://securityaffairs.co/wordpress...abilities.html

    Patches available:
    https://forum.vbulletin.com/forum/vb...-patch-level-2

    The first vulnerability, tracked as CVE-2019-17132, is a remote code execution flaw. That is BAAAAAD. And it's being used in the wild.

    Can someone notify the admins. I'm out of time on this one ...


    "White paper inner sleeve is pristine ..."

  • #2
    Do any of the admins/mods still use or look at this site? I'd be interested to know.
    Spirit Duplicator—collectable, charming, affordable... and also socially networked on FB / Twitter / Instagram.

    Comment


    • #3
      Ashra was looking just yesterday. I think he used to deal with all the computing gubbins. I also thought then when we all coughed up to upgrade that meant that vBulletin were taking care of all that side of things for us?
      "You don't want to kill the cash donkey"

      Comment


      • #4
        Maybe if the site got hacked it would liven the place up a bit

        Comment


        • #5
          On a more serious note don't use the same email / password combination across multiple sites.

          Although I'm sure you all don't do that already right

          Comment


          • #6
            Originally posted by Shere Khan View Post
            Ashra was looking just yesterday. I think he used to deal with all the computing gubbins. I also thought then when we all coughed up to upgrade that meant that vBulletin were taking care of all that side of things for us?
            Only if our site is hosted with them. Is it?

            If our site is hosted on our own server, the admins will have to do the patching.
            "White paper inner sleeve is pristine ..."

            Comment


            • #7
              Originally posted by alanmck View Post
              1. We know what we want to do (migrate the board to current cloud version of vbulletin, which will fix the security and stability issue). It will also future proof the board as upgrades to security/ versioning will happen automatically).
              The above was from 2017?
              Looks like we are now on the cloud version of vbulletin, so we should be alright as soon as vBulletin roll out the updates.


              "White paper inner sleeve is pristine ..."

              Comment


              • #8
                And the following message is on the previously mentioned https://forum.vbulletin.com/forum/vb...-patch-level-2
                "This security patch has already been applied to all vBulletin Cloud sites."

                So it looks like we're safe ...
                "White paper inner sleeve is pristine ..."

                Comment


                • #9
                  Originally posted by Turboellis View Post
                  And the following message is on the previously mentioned https://forum.vbulletin.com/forum/vb...-patch-level-2
                  "This security patch has already been applied to all vBulletin Cloud sites."

                  So it looks like we're safe ...
                  You can breathe out now Turbo...

                  Comment


                  • #10
                    Hey Ash!

                    Can we just hang out here? Fb creeps me out.
                    All the Wolpertingers

                    Comment


                    • #11
                      Originally posted by SirSlim View Post

                      You can breathe out now Turbo...

                      I didn't even go looking for the info ... it appeared on a podcast I listen to, so I couldn't really ignore it could I?
                      "White paper inner sleeve is pristine ..."

                      Comment


                      • #12
                        Originally posted by jay View Post
                        Maybe if the site got hacked it would liven the place up a bit
                        Originally posted by Cacapo View Post
                        Can we just hang out here? Fb creeps me out.
                        The irony being digging and sampling groups on FB with thousands of followers rate this place.

                        Comment

                        Working...
                        X