Jump to content

Invision Power Board has an exploit?


Recommended Posts


Posted

please dont make me laugh here...

Powered by Invision Power Board(U) v1.3 Final © 2003 IPS, Inc.

you really think we still have such an old build running here on msfn...? IPB is nearly finished developing version 2.2 and we are running 2.1.x here on msfn...

And another thing is... that site is using a lot of hacks... and those hacks might have exploits...

So the statement that all the IPB boards are "providing" a virus to its users only applies to that site.

Posted (edited)
please dont make me laugh here...
Powered by Invision Power Board(U) v1.3 Final © 2003 IPS, Inc.

you really think we still have such an old build running here on msfn...? IPB is nearly finished developing version 2.2 and we are running 2.1.x here on msfn...

And another thing is... that site is using a lot of hacks... and those hacks might have exploits...

So the statement that all the IPB boards are "providing" a virus to its users only applies to that site.

No. I believe that a virus writer found an exploit in IPB and managed to inject virus code into the server.

But it appears to only effect Java. (not JavaScript)

Also, I didn't see anything saying if this was an old virus or not. Sounded like a new virus.

The poster over at ocforums.com said that the Java tray icon appears and that it started downloading some data then closed.

I posted this thread, because I have been worried about a virus spree. Because there's a newly discovered exploit that's likely being acted on by a new virus, probably the Workstation service in Windows 2000 SP4 and Windows XP 2002 SP2. (Windows XP 2002 actually is what regular Windows XP non-server is )

I have proof. Look on the box of plain ol Windows XP, it will say 2002. (not the copyright year!)

Apparently 2003 was supposed to be an updated Windows XP, but decided to make a server version only!

Edited by RJARRRPCGP
Posted (edited)
please dont make me laugh here...
Powered by Invision Power Board(U) v1.3 Final © 2003 IPS, Inc.

you really think we still have such an old build running here on msfn...? IPB is nearly finished developing version 2.2 and we are running 2.1.x here on msfn...

And another thing is... that site is using a lot of hacks... and those hacks might have exploits...

So the statement that all the IPB boards are "providing" a virus to its users only applies to that site.

I hate when they do that... using 1.3 is really taking your life into your own hands, especially on a big board.

Edited by WBHoenig
Posted
please dont make me laugh here...
Powered by Invision Power Board(U) v1.3 Final © 2003 IPS, Inc.

you really think we still have such an old build running here on msfn...? IPB is nearly finished developing version 2.2 and we are running 2.1.x here on msfn...

And another thing is... that site is using a lot of hacks... and those hacks might have exploits...

So the statement that all the IPB boards are "providing" a virus to its users only applies to that site.

Your server on the other hand isn't that updated...

Server: Apache/1.3.37 (Unix) PHP/5.1.4 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a

X-Powered-By: PHP/5.1.4

Posted
Your server on the other hand isn't that updated...

Server: Apache/1.3.37 (Unix) PHP/5.1.4 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a

X-Powered-By: PHP/5.1.4

Apache is the latest 1.x.x.x version on the server. Yes, PHP should be updated. Maybe xper could take a look at that...

Also, may I point out the current version number for Apache: 1.3.3.7 :w00t:

Posted

I like how the first link doesn't even point to anything but a dead thread. The fact that it's a vBulletin forum also makes me believe the original link was changed.

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...