If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)

Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Bukkit Login Vulnerability. Update your servers!

Cydp3 · 2013-09-08 16:52:17

Hey lads, There's a vulnerability in Bukkit (& all its variants like Spigot) that allows any attacker to login as anyone. My own server was hit pretty bad by this yesterday. Some guy logged in as me and wrecked our spawn. Luckily we had a backup though so we only lost about 1 hour of data. Here's a link to an article on…

Options

08-09-2013 5:52pm

#1

Cydp3

Registered Users Posts: 35 ✭

Join Date: January 2011

Posts: 31

Hey lads,

There's a vulnerability in Bukkit (& all its variants like Spigot) that allows any attacker to login as anyone.

My own server was hit pretty bad by this yesterday. Some guy logged in as me and wrecked our spawn. Luckily we had a backup though so we only lost about 1 hour of data.

Here's a link to an article on PMC about it:
http://www.planetminecraft.com/blog/psa-server-exploit-discovered-update-immediately/

Everyone should update their minecraft server ASAP to avoid getting attacked.

Just spreading the word here so some people don't get screwed by this vulnerability!

2