SRL Archive - News and General

We're back!


Wizzup?

2010-01-01 12:20:23

We had to carry out a small patch, due to a minor bug in vBulletin.
Welcome back. ;)

Wanted

2010-01-01 12:21:06

cool?

Sabzi

2010-01-01 12:21:17

Weee!

EDIT: What was the problem? :p

Rubix

2010-01-01 12:25:52

minor?
[10:55:51] <Wizzup> And if you want me to leave a vulnerable vbulletin open to hackers, just tell me

That sir, doesn't seem minor in my book.

senrath

2010-01-01 12:27:46

The comment about the update not being to 4 made me look up how much it would cost to do so. I had no idea they charged almost the same to upgrade as they charge for a completely new license.

Edit:
From: Rubix
minor?

That sir, doesn't seem minor in my book.


The bug itself was minor. What could be done with it if exploited was just a little less minor.

Wizzup?

2010-01-01 12:28:59

From: Rubix
minor?

That sir, doesn't seem minor in my book.


An exploit in our input validation has recently been discovered. This could allow a brute force attack to comprise and spoof input data for a given user. To resolve this issue, it is necessary to release a patch level version of the active versions of vBulletin.


Bruteforce input data is minor. Nevertheless, it had to be fixed.

@Senrath: Yeah, they charge a lot.