On 1/7/2014 2:46 PM, medwinz wrote:
On Wed, Jan 8, 2014 at 3:37 AM, Michael Hamilton
wrote: I'm seeing 404 errors when attempting to reach http://forums.opensuse.org/ Other sites seem fine.
Anyone know what's going on?
There is a security breach.
[0] https://news.opensuse.org/2014/01/07/opensuse-forums-defaced/ [1] http://thehackernews.com/2014/01/openSUSE-Forum-Hacked-by-Pakistani-hacker.h...
From the 2nd link: The Pakistani Hacker confirmed is that has uploaded a PHP shell on the forum server using his own Private vBulletin's zero-day exploit, that allows him to browse, read or write/overwrite any file on the Forum server without root privileges.
How embarrassing. I hate forums. -- _____________________________________ ---This space for rent--- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org