Security releases of all vBulletin products
November 3rd, 2005All customers should immediately upgrade their boards.
Read the release announcement.
All customers should immediately upgrade their boards.
Read the release announcement.
The vBulletin team is proud to present vBulletin 3.5.0 Gold.
vBulletin 3.5.0 is now considered our stable and supported release, superceding the 3.0.x series. We now recommend that all customers upgrade to 3.5.0 to take advantage of the new features and improvements, although we will continue supporting 3.0.9 for the forseeable future, providing security fixes as necessary.
Another minor release which fixes some annoying bugs aswell a possible vulnerability.
Details here.
vbulletin announced a minor security release today. All owners should upgrade as fast as possible.
During a security audit of ubb.threads I discovered several potential security issues in the software.
Infopop is now aware of the problem but their time schedule for a new release is rather unspecific.
All they said is that it will take several weeks…
As the security flaws can be used to compromise your server, gain admin rights etc. I came up with modification that should protect you from possible attacks.
I encourage all owners of ubb.threads to install this modifcation. Currently this modification works for ubb.threads 6.3.x and 6.5.x.
Please not that all versions of ubb.threads are vulnerable!
Feel free to contact me if you have questions about this modification or need a working version for ubb.threads 6.4.x.