Advanced

Canonical Patches Security Issue on Ubuntu Forums, Passwords Weren't Compromised

Posted by hanuca on · Post a comment
Softpedia; By Marius Nestor
Mail this story
Print this story

It would appear that, on the day of July 14, 2016, the Ubuntu Forums were compromised by someone who managed to get past the security measures implemented by Canonical and access the forum's database.

Canonical was immediately notified of the fact that someone claimed to have a copy of the Ubuntu Forums database. After some investigation, it appears that the forum's database was indeed attacked at 20:33 UTC on July 14, 2016, by someone who injected certain formatted SQL to the database servers on the Ubuntu Forums.

Canonical reports that the attacker managed to download parts of the ‘user’ table that contained IP addresses, email addresses and usernames of over 2 million registered users. However, the attacker couldn't access active passwords of the users as they are stored as random strings thanks to the Ubuntu Single Sign On (SSO) technology.

Full Story

  Nav
» Read more about: Story Type: News Story, Security; Groups: Ubuntu

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments

No comments yet. Be the first.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post