The Arcive of vBulletin Modifications Site.

Security problem on vB 2.3.0 · **Released**: 08-03-2003

Hi,

We have purchase vBulletin (we are actually under version 2.3.0) but now we got a very critical problem, someone (a hacker i think) is now able to access to our customer account and can change their signature, email, etc...

Do you know this problem and do you have a patch witch can solve it ?

Thanks

seppl · #2 08-03-2003, 09:27 AM

Hi

do you really think, that the "hacker" has hacked your vb via an exploit? i think an admin has an simply guessable password ...

cu

Erwin · #3 08-03-2003, 09:35 AM

vB 2.3.0 has no security issues that is known.

ManuYamin · #4 08-03-2003, 11:45 AM

Ok, my administrative password is pretty hard to guess (letter + numbers + extra characters)

Have you any idea of how a hacker can access to my users data ?

ManuYamin · #5 08-03-2003, 11:46 AM

I've heard about a flash code that allow to read user's cookie, do you know this problem ?

ManuYamin · #6 08-03-2003, 11:53 AM

In fact this "hacker" change the user signature and write some diffamous post.

After that he change the user email adress and password so the user cannot reconnect and is marked as "user awaiting email notification".

Excuse me for my poor english (i'm french)

NTLDR · #7 08-03-2003, 12:04 PM

Its more than likly that the "hacker" has just obtained the users password, without any real hacking. Make sure you have HTML turned off everywhere (Sigs, PM and Posts). If you have an IP for them then report them to their ISP.

ManuYamin · #8 08-03-2003, 12:14 PM

Ok thanks i will turn off HTML