Ubuntu Forums database breached
Users of Ubuntu support forums should be on the lookout for dodgy emails after the website's database of 2 million email addresses was stolen.
Canonical announced the security breach on Friday after being notified that someone claimed to have a copy of the UbuntuForums.org database. An investigation revealed that an attacker did get access to the website's user records through a vulnerability.
The exploited SQL injection flaw was located in the Forum Runner add-on for vBulletin, commercial web forum software that powers over 100,000 community websites on the Internet and is especially popular with companies. The vulnerability was known, but the Canonical IT team had failed to apply the patch for it in a timely manner.
To read this article in full or to leave a comment, please click here