Jeremy White, CodeWeavers founder and CEO, announced yesterday that yet another Linux project has been hacked. He said in a post to the Wine-users mailing list that he is "sad to say that there was a compromise of the WineHQ database system."
Attackers have used phpMyAdmin, an open source database administration tool, to access the WineHQ project's database and harvest users' appdb and bugzilla access credentials. An incident report on the project's mailing list says that the attackers also obtained users' encrypted access passwords; whether the attackers will be able to crack these depends on their motivation and the strength of individual passwords, said the report. Therefore, the attackers can potentially also access other services if a WineHQ database user has used the same access credentials there.
The Wine developers say that they will be resetting every password and sending a message to all affected users. They note that externally accessing phpMyAdmin is no longer possible and that it currently remains unclear whether the intrusion was achieved via a security hole or a compromised administrator account. The developers also said that they believe that the attackers had no further system access. "We saw no evidence of any attempt to change the database", they added.
Attackers have used phpMyAdmin, an open source database administration tool, to access the WineHQ project's database and harvest users' appdb and bugzilla access credentials. An incident report on the project's mailing list says that the attackers also obtained users' encrypted access passwords; whether the attackers will be able to crack these depends on their motivation and the strength of individual passwords, said the report. Therefore, the attackers can potentially also access other services if a WineHQ database user has used the same access credentials there.
The Wine developers say that they will be resetting every password and sending a message to all affected users. They note that externally accessing phpMyAdmin is no longer possible and that it currently remains unclear whether the intrusion was achieved via a security hole or a compromised administrator account. The developers also said that they believe that the attackers had no further system access. "We saw no evidence of any attempt to change the database", they added.
-News Source (The H, efytimes)
LINK TO OUR HOME PAGE :
Voice Of GREYHAT is a non-profit Organization propagating news specifically related with Cyber security threats, Hacking threads and issues from all over the spectrum. The news provided by us on this site is gathered from various Re-Sources. if any person have some FAQ's in their mind they can Contact Us. Also you can read our Privacy Policy for more info.
Thank You !
-Team VOGH
If you enjoyed VOGH News, Articles Then Do Make sure you to Subscribe Our RSS feed. Stay Tuned with VOGH and get Updated about Cyber Security News, Hacking Threads and Lots More. All our Articles and Updates will directly be sent to Your Inbox. Thank You!
-Team VOGH
Categories:
cyber-crime
,
LINUX
,
security-news
