security : UK Hippy hacked

This topic has 12 replies, 5 voices, and was last updated April 12, 2008 at 7:43 pm by MisterDuck.

Viewing 13 posts - 1 through 13 (of 13 total)

Author

Posts
April 4, 2008 at 9:38 am #1044149
General Lighting
Moderator
uk hippy another vbulletin-based board) got hacked)

might be a vuln in vbulletin somewhere (although I think UKH tends to use the “bleeding edge” newer versions rather than our custom(?) code)
April 4, 2008 at 12:07 pm #1159703
Techno Viking
Participant
General Lighting wrote:

uk hippy another vbulletin-based board) got hacked)

might be a vuln in vbulletin somewhere (although I think UKH tends to use the “bleeding edge” newer versions rather than our custom(?) code)

Let me know what happened and how it was done when if/when you find out… Courrage to those involved!
April 4, 2008 at 12:07 pm #1217575
Techno Viking
Participant
General Lighting wrote:

uk hippy another vbulletin-based board) got hacked)

might be a vuln in vbulletin somewhere (although I think UKH tends to use the “bleeding edge” newer versions rather than our custom(?) code)

Let me know what happened and how it was done when if/when you find out… Courrage to those involved!
April 4, 2008 at 6:03 pm #1159704
Techno Viking
Participant
The message they left suggests the server that was hacked not vbulletin…
April 4, 2008 at 6:03 pm #1217576
Techno Viking
Participant
The message they left suggests the server that was hacked not vbulletin…
April 4, 2008 at 6:16 pm #1159705
Techno Viking
Participant
Better backup and download copies though eh…
April 4, 2008 at 6:16 pm #1217577
Techno Viking
Participant
Better backup and download copies though eh…
April 5, 2008 at 4:50 am #1159708
MisterDuck
Participant
i dont use ukhippy cos although i was involved in the whole idea of it being setup (as a reaction to skip’s actions on hipforums.com, despite what they say it was a reaction!) they do not permit me to discuss any drug use as i am under 18, they say its because of legal implications but i have yet to come across any sort of legistlation that holds them back from this!
April 5, 2008 at 4:50 am #1217580
MisterDuck
Participant
i dont use ukhippy cos although i was involved in the whole idea of it being setup (as a reaction to skip’s actions on hipforums.com, despite what they say it was a reaction!) they do not permit me to discuss any drug use as i am under 18, they say its because of legal implications but i have yet to come across any sort of legistlation that holds them back from this!
April 5, 2008 at 9:20 am #1159706
Tek Offensive
Participant
so did someone manually hack that site or was it some bug/virus? who the hell does that?
April 5, 2008 at 9:20 am #1217578
Tek Offensive
Participant
so did someone manually hack that site or was it some bug/virus? who the hell does that?
April 12, 2008 at 7:43 pm #1159707
leveret
Participant
I’m getting a zillion-and-one probes on my own server for php vulns at the moment – xmlrpc.php (in several dozen package installation trees), as well as specific probes for non-rpc holes in horde, phpmyadmin, vhcs (whatever that is) etc etc.

Fortunately I don’t run any of them ! Possibly worth uninstalling anything php that you don’t absolutely need though, and subscribing to the announce list for those that you do.

Nick
April 12, 2008 at 7:43 pm #1217579
leveret
Participant
I’m getting a zillion-and-one probes on my own server for php vulns at the moment – xmlrpc.php (in several dozen package installation trees), as well as specific probes for non-rpc holes in horde, phpmyadmin, vhcs (whatever that is) etc etc.

Fortunately I don’t run any of them ! Possibly worth uninstalling anything php that you don’t absolutely need though, and subscribing to the announce list for those that you do.

Nick
Author

Posts