PDA

View Full Version : Security Memo: Forums Under Attack - Risk Level: Trivial


ManagerJosh
12-26-2004, 04:27 AM
Security Memo: WorldSims Forums Under Attack by Worm
Risk Level Assessment: Trivial

Overview:

Our security team has recently become aware of a potential security issue within the last 48hrs that a certain worm has been attacking various boards around the internet. We are currently monitoring the situation, and are keeping uprised of the situation and all developments associated with this worm.

Please note no personal information has been compromised in any manner, and all information is still secure.



Details:
This worm is currently targetting all PHP Scripts and passing long strings into all variables attempting to find vulnerable systems.

Developments:
We are currently monitor the situation with vBulletin Team Members and are monitoring the situation to ensure no security issues will arise. Any security updates related to this worm will be implemented immediately to prevent any compromise to your personal information.

Internal Notes:
Security Memo Published: December 26, 2004 0519 PST

Trivial Risk Level was determined at December 26 2004 1533PM by Security Team Members analyzing data compiled shared and analyzed with vBulletin Team Members.

"Trivial" status has been declared as the nature of this worm could lead to potential damage in the future, and because of the aggressive nature of the worm scanning variables and exploits within the system. At the time of this security bulletin, this worm has been processed as minor, and harmless, but have potential to become harmful if not monitored.

Risk Level Assessments may be upgraded or downgraded, based on data continously being processed and analyzed by our security teams and members of vBulletin.

Any concerns, please Contact Us (http://forums.worldsims.org/sendmessage.php) and a member of the WorldSims team will reply as soon as possible.