wiki.php.net compromised
Free translation of the news:
wiki.php.net was compromised and the attacker was able to collect data from the accounts. According to our data, other sections of the php.net infrastructure have not been affected. Our main concern now is the integrity of the source code. We have carried out all sorts of checks for each commit since the release of php version 5.3.5 to make sure that the stolen accounts were not used to introduce malicious codes - everything is in order. The compromised machines have been cleared, all passwords for SVN accounts have been changed.
We continue to investigate the fact of the attack, which was a combination of exploiting a vulnerability in the Wiki-section software engine and Linux exploit to obtain administrator rights.
a source
UPD: 20.03, 10:20 - wiki.php.net and windows.php.net are still not available (yes, the page for Windows users was also unavailable yesterday, but I noticed this before reading the news, and after that thought to bind). These are just my observations - maybe someone else noticed something?
wiki.php.net was compromised and the attacker was able to collect data from the accounts. According to our data, other sections of the php.net infrastructure have not been affected. Our main concern now is the integrity of the source code. We have carried out all sorts of checks for each commit since the release of php version 5.3.5 to make sure that the stolen accounts were not used to introduce malicious codes - everything is in order. The compromised machines have been cleared, all passwords for SVN accounts have been changed.
We continue to investigate the fact of the attack, which was a combination of exploiting a vulnerability in the Wiki-section software engine and Linux exploit to obtain administrator rights.
a source
UPD: 20.03, 10:20 - wiki.php.net and windows.php.net are still not available (yes, the page for Windows users was also unavailable yesterday, but I noticed this before reading the news, and after that thought to bind). These are just my observations - maybe someone else noticed something?
')
Source: https://habr.com/ru/post/115815/
All Articles