The Arcive of Official vBulletin Modifications Site.

Barcham · #1 04-09-2014, 01:41 PM

I have been hearing an awful lot about this new bug in the last couple of days and I was wondering if this is something we have to worry about looking into on our vbulletin boards. Does anyone know if this is a bug that can affect us and is there any action we should be taking to secure our boards?

http://heartbleed.com/

Quote:

The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).

The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users.

BirdOPrey5 · #2 04-09-2014, 04:41 PM

This bug isn't at all related to vBulletin.

If your vBulletin forum happens to run on a web server that is using a secure, https, connection then you may want to check with your host to confirm they have patched the system if they were vulnerable.

Adrian Schneider · #3 04-09-2014, 09:42 PM

If you are running a webserver, especially a VPS or higher, you are probably vulnerable unless you've explicitly upgraded openssl or if you know your host has for you. It's not just https, there's also SSH, and even if you aren't using https, cpanel probably is.

I'd be worried whether I had vBulletin, XenForo, Wordpress or any other software on a public-facing web service.

CAG CheechDogg · #4 04-11-2014, 09:06 AM

This is something that mostly every host has already patched by now, I use HostGator and they have everything patched up already ...check with your host or simply got to your host's site and they will have a site checker for this which will tell you right away if your site is safe ...for HostGator account holders they can use the following link to check their site:

http://heartbleed.hostgator.com/

Max Taxable · #5 04-11-2014, 01:39 PM

If you're skeered a site you go to might have this exploit, just test it here.

http://filippo.io/Heartbleed/

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.04473 seconds Memory Usage 2,200KB Queries Executed 13 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (1)ad_showthread_firstpost (1)ad_showthread_firstpost_sig (1)ad_showthread_firstpost_start (1)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)navbar (3)navbar_link (120)option (5)post_thanks_box (1)post_thanks_box_bit (5)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (1)post_thanks_postbit (5)post_thanks_postbit_info (5)postbit (5)postbit_onlinestatus (5)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_postinfo_query fetch_postinfo fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start fetch_musername post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start post_thanks_function_fetch_thanks_bit_start post_thanks_function_show_thanks_date_start post_thanks_function_show_thanks_date_end post_thanks_function_fetch_thanks_bit_end post_thanks_function_fetch_post_thanks_template_start post_thanks_function_fetch_post_thanks_template_end tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

Благодарность от:
Max Taxable

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!