Security releases of all vBulletin products

November 3rd, 2005

All customers should immediately upgrade their boards.

Read the release announcement.

vBulletin 3.5.0 goes gold

September 29th, 2005

The vBulletin team is proud to present vBulletin 3.5.0 Gold.

vBulletin 3.5.0 is now considered our stable and supported release, superceding the 3.0.x series. We now recommend that all customers upgrade to 3.5.0 to take advantage of the new features and improvements, although we will continue supporting 3.0.9 for the forseeable future, providing security fixes as necessary.

Read the full announcement.

vBulletin 3.0.9 released

September 10th, 2005

Another minor release which fixes some annoying bugs aswell a possible vulnerability.

Details here.

vbulletin 3.0.8 - security release

July 28th, 2005

vbulletin announced a minor security release today. All owners should upgrade as fast as possible.

Several security flaws in ubb.threads discovered

April 20th, 2005

During a security audit of ubb.threads I discovered several potential security issues in the software.
Infopop is now aware of the problem but their time schedule for a new release is rather unspecific.
All they said is that it will take several weeks…
As the security flaws can be used to compromise your server, gain admin rights etc. I came up with modification that should protect you from possible attacks.

I encourage all owners of ubb.threads to install this modifcation. Currently this modification works for ubb.threads 6.3.x and 6.5.x.
Please not that all versions of ubb.threads are vulnerable!

Feel free to contact me if you have questions about this modification or need a working version for ubb.threads 6.4.x.