Found security expliot in port phpBB 2.0.8 FreeBSD4.10

estover_at_nativenerds.com
Date: 12/27/04

  • Next message: Jerry Bell: "Re: Found security expliot in port phpBB 2.0.8 FreeBSD4.10" 
    Date: Mon, 27 Dec 2004 15:36:42 -0700 (MST)
To: freebsd-security@freebsd.org

    I think, there is a neat exploit in the phpbb2.0.8 because I found my home
    page defaced one dark morning. The patch for phpBB is here.
    http://www.phpbb.com/downloads.php

    The excerpt of the log is attached.

    I believe the link to the described exploit is here.
    http://secunia.com/advisories/13239

    The defacement braggen page is here filter to show the exploited FreeBSD
    machines that aneurysm.inc has defaced
    http://www.zone-h.org/en/defacements/filter/filter_defacer=aneurysm.inc/filter_system=FreeBSD/page=1/
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Jerry Bell: "Re: Found security expliot in port phpBB 2.0.8 FreeBSD4.10"