|
2012-05-04, 04:18 PM | #1 | |
a.k.a. Sparky
Join Date: Sep 2004
Location: West Palm Beach, FL, USA
Posts: 2,396
|
OpenX Security Notice
http://blog.openx.org/05/security-up...penx-28-users/
Quote:
__________________
SnapReplay.com a different way to share photos - iPhone & Android |
|
2012-05-04, 05:16 PM | #2 |
Subversive filth of the hedonistic decadent West
Join Date: Mar 2003
Location: Southeast Florida
Posts: 27,936
|
I followed all the above steps.
I haven't been hacked. This step lost me though "3. Replace the www/admin/dashboard.php file with the one in this archive so as to not break the login process." |
2012-05-04, 08:15 PM | #3 | |
If you really need money, you can sell your kidney or even your car
Join Date: Mar 2005
Posts: 373
|
Bastards got me but I had /admin/ locked down so maybe they had troubles doing much I don't know. I see the rougue user added 4-14 but no evidence of any malware being served yet. Having to do a full audit now.
Quote:
Edit: Here are some more technical details about the hack I found interesting http://www.infosecstuff.com/openx-cs...ely-exploited/ Last edited by Allfetish; 2012-05-04 at 08:43 PM.. |
|
2012-05-04, 11:01 PM | #4 | |
Subversive filth of the hedonistic decadent West
Join Date: Mar 2003
Location: Southeast Florida
Posts: 27,936
|
Quote:
http://www.openx.com/downloads/dashboard.zip My OpenX was hacked a few years ago. It was a real mess to straighten out. Don't want to ever go through that again. |
|
2012-05-05, 11:37 AM | #5 |
"Young dumb and full of cum"
|
Ouch!
Glad I deleted OpenX a couple months ago
__________________
JAPANESE ADULT AFFILIATE PROGRAM |
2012-05-07, 10:45 AM | #7 |
a.k.a. Sparky
Join Date: Sep 2004
Location: West Palm Beach, FL, USA
Posts: 2,396
|
2.8.8 is also affected. There is no fix yet.
__________________
SnapReplay.com a different way to share photos - iPhone & Android |
|
|