Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.

https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

Bukkit Login Vulnerability. Update your servers!

Cydp3 · 2013-09-08 16:52:17

Hey lads, There's a vulnerability in Bukkit (& all its variants like Spigot) that allows any attacker to login as anyone. My own server was hit pretty bad by this yesterday. Some guy logged in as me and wrecked our spawn. Luckily we had a backup though so we only lost about 1 hour of data. Here's a link to an article on…

08-09-2013 05:52PM

#1

Cydp3

Registered Users, Registered Users 2 Posts: 35 ✭

Join Date: January 2011

Posts: 31

Hey lads,

There's a vulnerability in Bukkit (& all its variants like Spigot) that allows any attacker to login as anyone.

My own server was hit pretty bad by this yesterday. Some guy logged in as me and wrecked our spawn. Luckily we had a backup though so we only lost about 1 hour of data.

Here's a link to an article on PMC about it:
http://www.planetminecraft.com/blog/psa-server-exploit-discovered-update-immediately/

Everyone should update their minecraft server ASAP to avoid getting attacked.

Just spreading the word here so some people don't get screwed by this vulnerability!

2