vBulletin Security Hole

[thescreensavers]

I just learned from a mass email from NotebookReview that there is a security hole in a vBulletin. Does this Problem include Anandtech Forums since we run vBulletin as well?

I am changing my passwords on all Vbulletin forums as we speak.

Only username and passwords were compromised if anyone is wondering about NotebookReview.

 

[ViRGE]

Without more knowledge of the hole you speak of, we couldn't say.

 

[thescreensavers]

^ You guys should probrally contact vBulletin then if you are in the dark about the issue? Thought it might not affect the version Anandtech runs?

Here is the Main post over at NotebookReview

http://forum.notebookreview.com/sit...otification-urgent-alert-security-breach.html

 

[ViRGE]

We're on vB 3.8.7. They're on 4.2.0. Between that and the difference in plugins, I have no way of knowing what the vulnerability was.

Regardless our IT staff keeps vB up to date. If there was a patch issued, we would have it.

 

[CA19100]

I'm an admin of a vBulletin 4 site, and received the memo regarding the security hole. It does not affect vBulletin 3, so it's not an issue here.

 

[thescreensavers]

I'm an admin of a vBulletin 4 site, and received the memo regarding the security hole. It does not affect vBulletin 3, so it's not an issue here.

Sweet, thats good news. Thanks for the reply.