High-severity vulnerability in vBulletin is being actively exploited

'Attackers are mass-exploiting an anonymously disclosed vulnerability
that makes it possible to take control of servers running vBulletin,
one of the Internet’s most popular applications for website comments.
Sites running the app should take comments offline until
administrators install a patch that vBulletin developers released late
Wednesday morning.

The vulnerability was disclosed through an 18-line exploit that was
published on Monday by an unidentified person. The exploit allows
unauthenticated attackers to remotely execute malicious code on just
about any vBulletin server running versions 5.0.0 up to 5.5.4. The
vulnerability is so severe and easy to exploit that some critics have
described it as a back door.'

-- source: https://arstechnica.com/information-technology/2019/09/public-exploit-code-spawns-mass-attacks-against-high-severity-vbulletin-bug/

Cheers, Peter
-- 
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
_______________________________________________
wlug mailing list -- [email protected] | To unsubscribe send an email to [email protected]
Unsubscribe: https://list.waikato.ac.nz/postorius/lists/wlug.list.waikato.ac.nz