If you have a new account but are having problems posting or verifying your account, please email us on for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact

Bukkit Login Vulnerability. Update your servers!

  • 08-09-2013 5:52pm
    Registered Users Posts: 35

    Hey lads,

    There's a vulnerability in Bukkit (& all its variants like Spigot) that allows any attacker to login as anyone.

    My own server was hit pretty bad by this yesterday. Some guy logged in as me and wrecked our spawn. Luckily we had a backup though so we only lost about 1 hour of data.

    Here's a link to an article on PMC about it:

    Everyone should update their minecraft server ASAP to avoid getting attacked.

    Just spreading the word here so some people don't get screwed by this vulnerability!