Re: Sourceforge compromized?

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Sourceforge compromized?
From: "Eliah Kagan" <degeneracypressure@xxxxxxxxx>
Date: Fri, 2 Feb 2007 11:52:49 -0500
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=jEO2xpvHfO74z50x6Cwijhtod94Zqm1TxDiJ+/N73cI3TDOv7fOLEy93rT/P3I435XQMM80LJ1ot6XaxTsDWO6+xR+09WwQJJzgvyt51HsXbMs8f5HNVvfHq+bT4HaivMbVGEt6SsY+Qmme3WspjgT1BRNnIQ+Ov6FHkk7tsjfM=
In-reply-to: <B3BCAF4246A8A84983A80DAB50FE7242862C1D@xxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20070201185441.8765.qmail@xxxxxxxxxxxxxxxxxxxxxxx> <200702012244.14250.cleidh_mor@xxxxxxxxxxxxxxx> <B3BCAF4246A8A84983A80DAB50FE7242862C1D@xxxxxxxxxxxxxxxxxx>

If the content can be shown to be present due to the actions of the
YaPiG project site admins (e.g. using very weak passwords, being
fooled by a sourceforge.net phishing site that steals passwords,
putting the material up intentionally), a full code audit for
everything from sourceforge.net is probably not necessary.

-Eliah

On 2/2/07, Michael Scheidell <scheidell@xxxxxxxxxx> wrote:


http://yapig.sourceforge.net/demo/photos/photos2291.html

(no one under 18 should click on that link above, it may violate state
laws doing so)

Could someone from sourceforge.net comment? What else is compromised on
the server?

Can just anyone post anything to any directory or are there specific
directories that can be hacked?

Is it just yapig.sourceforge.net?

Either case, I should suggest everyone be careful about what you
download from sourceforge till they do a full code audit and post the
results here.

--
Michael Scheidell, CTO
SECNAP Network Security
561-999-5000 x 1131
www.secnap.com

References:
- strange behavior on Cisco 2801
  - From: Marcin
- Re: strange behavior on Cisco 2801
  - From: Neil Anderson
- Sourceforge compromized?
  - From: Michael Scheidell

Prev by Date: Chicken of the VNC 2.0 remote DoS
Next by Date: Re: Sourceforge compromized?
Previous by thread: Sourceforge compromized?
Next by thread: Re: Sourceforge compromized?
Index(es):
- Date
- Thread