×
Create a new article
Write your page title here:
We currently have 3,185 articles on s23. Type your article name above or create one of the articles listed here!



    s23
    3,185Articles

    CCCWikiExploit

    November 26, 2004 (webmaster) Durch einen bislang unbekannten TWiki-Exploit wurde unauthorisierter Zugriff für einige spanische Hackerkollegen auf CCC Server möglich. Dabei sind in Vergessenheit geratene Registrierungsdaten des Chaos Communication Camp 2003 veröffentlicht worden.

    http://www.ccc.de/updates/2004/camp-server-hack?language=en

    http://www.digitalsec.net/stuff/fun/CCC/ccc_and_cccs.txt

    http://www.digitalsec.net/stuff/fun/CCC/

    ...The server has been used for hosting another TWiki installation after the camp, but the organization crew left planet earth due to extraterrestrial commitments and more or less forgot about its existence.

    Our spanish colleagues succesfully broke into this machine, exploiting a newly found bug in the TWiki software, and published part of the stuff. This includes personal registration data as well as crypt passwords for Wiki users. While the passwords are not available in clear text, they are susceptible to a dictionary attack. Therefore, these passwords must be considered compromised, so we urge anybody who used the same password for camp registration or TWiki and any other system to take appropriate measures.

    Cookies help us deliver our services. By using our services, you agree to our use of cookies.