Hackers scalp Apache

Tagged: Apache, hackers, Software, Computer Hardware, Technology
Source: Fudzilla - Read the full article
Posted: 4 years 15 weeks ago

Heap-um-big problems

Hackers have broken into a server used by the Apache Software Foundation to keep track of software bugs.

While the attack did not compromise the open-source Web server's source code repository, they did get their paws on low-privilege accounts on another server used to maintain the people.apache.org Web site. Philip Gollucci, vice president of Apache infrastructure said that None of the source code was affected in any way.

Apparently the attack used a cross-site scripting bug to gain access. They then used a password-guessing attack to break into the Atlassian JIRA software used by Apache. After that it was a simple matter of installing a password stealing program and gaining full control of the machine. For a while they had access to two other programs hosted by Apache on the same server, the Confluence wiki program and Bugzilla.

The hackers had control of the server for three days between April 6 and April 9 The unidentified attackers broke into Apache's JIRA server on April 6 and had begun stealing user passwords by the time Apache administrators noticed the issue on April 9. It is the second time that the Apache Software Foundation has been hit by hackers. Last August intruders were able to break into the Minotaur server and run their owns scripts on Apache's Web site.

 

Comments

GraysonPeddie
GraysonPeddie's picture
Offline
Joined: 10/29/2006
Posts: 569

Hey Manic! :)

Yeah, computer users in the Apache Foundation can be too computer-illiterate to click in links when it comes to resetting passwords and using weak passwords...

Although I don't have trust on Fudzilla, here's the article about what happened.

http://blogs.zdnet.com/security/?p=6123&tag=content;col1

HTPC: AMD Athlon X2 4050e CPU with 780G ATX motherboard running Windows 8 DP (4GB) and Ubuntu; Server: AMD AII X2 240e CPU with 880G-based ATX motherboard running Ubuntu Server 10.04 LTS (8GB)

2 pairs of Insignia NS-B2111s (front/rear), Pioneer SP-C21 Center Speaker, and 12" Velodyne Sub

Just ordered HP Pavilion dv7-6165us from QVC. Will have it by next Friday.

Manic Mouse
Manic Mouse's picture
Offline
Joined: 02/01/2007
Posts: 124

All I gotta say is .... why?

What does crack an open source site prove? That they are the best-of-the-best? Good grief Charlie Brown. Just shows they are lamers that cant deal with anything better..

Maybe someone like Microsoft is too hard for these amateurs.

Mark Baker

Asus P9X79 Deluxe, Intel i7 3930K @4.5Ghz, 64gb G.Skill RipjawsZ 10-10-10-30 PC3-12800, Sapphire HD 7950 3GB, OCZ Vertex 4, Vertex 3, Intel 510 & Adata SSDs, wrapped in a CoolerMaster HAF XM case