DaemonForums  

Go Back   DaemonForums > DaemonForums.org > News

News News regarding BSD and related.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 13th April 2010
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 3,248
Thanked 182 Times in 149 Posts
Default Apache's Atlassian JIRA system compromised

From http://www.h-online.com/security/new...ed-976465.html

Quote:
he Apache Software Foundation has detailed how its hosted Atlassian JIRA, Confluence and Bugzilla systems and hashed passwords were compromised in a direct targeted attack on the open source project's infrastructure. As the JIRA and Confluence systems use a SHA-512 hash without a random salt, the Infrastructure team believe that the risk to users with simple passwords is high and recommends that most users should change their password. If users logged into Apache's JIRA between April 6th and the 9th, they should also consider their passwords compromised.
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
  #2   (View Single Post)  
Old 13th April 2010
J65nko J65nko is offline
Administrator
 
Join Date: May 2008
Location: Budel - the Netherlands
Posts: 3,248
Thanked 182 Times in 149 Posts
Default

Also see http://www.theregister.co.uk/2010/04...ch_postmortem/
__________________
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Discovering SSH versions of compromised hosts with nc(1) J65nko General software and network 1 31st December 2009 11:01 AM
Upgrade Apache 1.3 mod_ssl to Apache 2.2 beandip FreeBSD Ports and Packages 11 26th March 2009 09:12 PM
Can start rtorrent like apache and mysql when system boot mfaridi FreeBSD Ports and Packages 0 26th November 2008 09:27 AM
Red Hat servers compromised tanked Other BSD and UNIX/UNIX-like 10 25th August 2008 04:41 PM
Which file system use to share data on Bsd system? aleunix Other BSD and UNIX/UNIX-like 2 1st June 2008 04:14 PM


All times are GMT. The time now is 03:57 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick