ne3ek

this thread needs some ****.

1992VR-4

where can I host a ---- load of videos

biggmike

I HaXoReD YoUr ------ BoX

Paul99EX

then post some noob

FooK

it was me.

honestly, i seriously doubt it was anyone from HMT, i bet your IP tracker friend there is just a moron.

O 16581 72452 5

Allow me to appologize, i'm very frustrated with what has been happening to me in the past few months, this just topped it off. I guess it wasn't a user from this board, i don't know how an IP was tracked back here.

Again, i'm sorry, thank you for the link on this story. Most users of this board have been ******** to me, it being tracked back here seemed to make sense.

crx2fast

ok well to make up for your whining and moaning... i think its only fair that you paypal everyone 10 dollars, and put lots of **** in this thread

O 16581 72452 5

To show i'm sorry, have some ****!




This was taken off http://www.thehun.com

Great site!

45psi

sorry that life's giving you a dicking right now, and dont take most of the ---- said here personally. the main focus to this site is to help others push more air through their motors. that and ****. if it doenst kill you, it'll make you stonger and want to pack a gun.

TunerToys

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Technical Cyber Security Alert TA04-356A
Exploitation of phpBB highlight parameter vulnerability

Original release date: December 21, 2004
Last revised: --
Source: US-CERT

Systems Affected

phpBB versions 2.0.10 and prior

Overview

The software phpBB contains an input validation problem in how it
processes a parameter contained in URLs. An intruder can deface a
phpBB website, execute arbitrary commands, or gain administrative
privileges on a compromised bulletin board.

I. Description

phpBB is an open-source bulletin board application. It fails to
properly perform an urldecode() on the "highlight" parameter supplied
to viewtopic.php. This may allow a remote attacker to execute
arbitrary commands on a vulnerable server.

According to reports, this vulnerability is being actively exploited
by the Santy.A worm. The worm appears to propogate by searching for
the keyword "viewtopic.php" in order to find vulnerable sites.

The worm writes itself to a file named "m1ho2of" on the compromised
system. It then overwrites files ending with .htm, .php, .asp. shtm,
.jsp, and .phtm replacing them with HTML content that defaces the web
page. The worm then tries to use PERL to execute itself on the
compromised system and propogate further.
US-CERT is tracking this issue as:

VU#497400 - phpBB viewtopic.php fails to properly sanitize input
passed to the "highlight" parameter

II. Impact

A remote attacker may be able to deface a phpBB website and execute
arbitrary commands on a compromised bulletin board.

III. Solution

Upgrade phpBB

Upgrade to phpBB verison 2.0.11 to prevent exploitation.

Appendix A. References

* US-CERT Vulnerability Note VU#497400 -
<http://www.kb.cert.org/vuls/id/497400>
* phpBB Downloads - < http://www.phpbb.com/downloads.php>
* phpBB Announcement -
<http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=240636>
* Symantec Security Response - Perl.Santy -
<http://securityresponse.symantec.com...ata/perl.santy
.html>
* McAfee - Computer Virus Software and Internet Security -
<http://us.mcafee.com/virusInfo/defau...ption&virus_k=
130471>
__________________________________________________ _______________

This vulnerability was reported by the phpBB Development Team.
__________________________________________________ _______________

Feedback can be directed to the authors: Jeffrey Gennari and
Jason Rafail
__________________________________________________ _______________

This document is available from:

<http://www.us-cert.gov/cas/techalerts/TA04-356A.html>

__________________________________________________ _______________

Copyright 2004 Carnegie Mellon University.

Terms of use: <http://www.us-cert.gov/legal.html>
__________________________________________________ _______________

Revision History

Dec 21, 2004: Initial release

Last updated December 21, 2004 -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iQEVAwUBQci1ihhoSezw4YfQAQLarQf/cyzsvhFzCnqDyzRRqccGx8yG+AUMLQnG
C+eZ3oyfEntqJkMh4ApNb1er8F+7BkHNnhzvPeifqDQPMGwpjL rBnyPr4vSneG3v
JBregSqACGHzR7/TDeDJ94kiBFPty77AS5r6eqsLe0ueaL2kA149lEEcbGjPGd+q
P0my0Jxkal0DPOwGuPyFIcjdGBAYHXqyCbI0hl6DqGGj/vSRkuhjt5EY0K7ShOdV
JaSmRWgkbM0vXtKj+sWCSOLFoDschFzlW+Egke17xf3bIZUwvx 5uNsw8AXZwCiaa
CJNJcL+sI8JvXEQqC5xiAkYgUVDA+WzRGtKoVfkEJBpv8PS0My hX+Q==
=ZLLn
-----END PGP SIGNATURE-----