phpBB.com hackerato?

[meganoide]

è giù da un pò o c'è solo l'home page senza il forum: fonte ma anche sul sito stesso

[fede_pg]

At present www.phpbb.com is offline due to a group of politically motivated hackers wishing to use an opensource project to push their agenda ... shame on them.

I will take this opportunity to note that given currently available information this hacking episode does not appear to be due to phpBB itself. Instead a third party application looks to have been the problem. Other sites were attacked at the same time as www.phpbb.com by the same group displaying the same information and in these cases the same third party application has been suggested as the common factor (thus far). Equally we are not aware of any other phpBB boards being attacked and we have not been notified of any valid security issues recently. Obviously we will have more details when we've reviewed just what happened.

We are working to recover the server but this may take some time. Meanwhile users can visit our development board, area51.phpbb.com where they can receive support for phpBB 2.0.x. Of course you can also view the next version of phpBB, 3.0 "Olympus" in the process (minus the new style of course!)

We are also maintaining our IRC support channel, #phpbb on the irc.freenode.net network

We apologise for any problems this may cause our userbase. We obviously take the huge support our community gives phpBB very seriously. And we will do our best to return to "normal operations" just as soon as we can.

psoTFX - phpBB Group

Tratto dalla home... mi pare che non ci siano storie...

Inizia a diventare inquietante sto phpBB (anche se loro dicono che la colpa non sia del phpBB stesso), potrò più avere un forum sicuro per il mio sito?

[nonick]

Salve,
la causa del deface non è da attribuirsi a phpbb, ma un vecchio bug presente nel sistema di statistiche AWStats.

Saluti

[meganoide]

già, e proprio a causa di questo bug in awstat che sono stati colpiti anche altri server

[fede_pg]

Quale versione di AWSTATS è vulnerabile?

L'exploit è sfuttabile sia su Linux sia su Windows?

Mi date qualche link da seguire?

Grazieee...

[meganoide]

questo

[fede_pg]

Thx Meganoide

<edit>

Applicata la modifica suggerita... speriamo che basti

</edit>

[meganoide]

"The bad news is the attack on our "proper" box was clearly more than a mere "defacement". Our server admin has now received the box and started to recover it. The persons who attacked the site deleted all web access logs, all system logs and the root user log. Other critical system folders/files were also deleted, hence the difficulties in trying to remotely access the box."

mica pizza e fichi...