Zero Hour ATX/AT3 Hack ***Patch your scripts*** - GoFuckYourself.com

spasmo · 01-12-2007, 05:59 PM

My apologies if this is a duplicate. I didn't see it on the first page.

If you are running ATX or AT3, please visit http://www.arrowscripts.com/patch.shtml.

Your system is only at risk if your signup forms are enabled.

Spunky · 01-12-2007, 06:08 PM

Was it similar to the TM3 attack?

spasmo · 01-12-2007, 06:15 PM

Quote:

Originally Posted by Spunky

Was it similar to the TM3 attack?

The only public info I've seen is that you should be on the look out for "strange" new trades that contain exploit code in the email sent to you when the new trades sign up.

MrVids · 01-12-2007, 06:21 PM

thanks for the heads up
patched mine this morning, should have made a post myself

fris · 01-12-2007, 06:24 PM

big heads up, hope they notified everyone by email

Spunky · 01-12-2007, 06:24 PM

Cool..thanks for the info Spasmo

spasmo · 01-12-2007, 06:27 PM

Quote:

Originally Posted by Fris

big heads up, hope they notified everyone by email

They did, in a way. I received notification via email, and though it was from Aheib, it was using the broadcast mailing list from another site you likely frequent.

GrouchyAdmin · 01-12-2007, 06:55 PM

Not sure if this affects other builds, but I just sent them an email:

Anyone using the CentOS 4 version of AT3 (at least) will see their admin works, but if they go to the settings page, it bitches about a missing file. This is (mostly) ok.

Create an empty file in notepad (or touch on UNIX), named 'informer.dat'. Upload or move to your at3-install/d directory. admin.cgi works again.

I'm betting they left debugging on by mistake; there's no use of 'd/informer.dat' in any previous build of admin.cgi.

spasmo · 01-12-2007, 07:00 PM

It didn't happen to me on FC4, but he whipped those out in a hurry. He's getting some sleep before doing Mandrake and the others he didn't get to.

Thanks much for the tip.

xApster · 01-12-2007, 07:56 PM

thank god for http://www.swiftwill.com

abshard · 01-12-2007, 08:02 PM

Quote:

Originally Posted by toonpornblog

Not sure if this affects other builds, but I just sent them an email:

Anyone using the CentOS 4 version of AT3 (at least) will see their admin works, but if they go to the settings page, it bitches about a missing file. This is (mostly) ok.

Create an empty file in notepad (or touch on UNIX), named 'informer.dat'. Upload or move to your at3-install/d directory. admin.cgi works again.

I'm betting they left debugging on by mistake; there's no use of 'd/informer.dat' in any previous build of admin.cgi.

If you upgraded to build 12 of at3 you should have the 'd/informer.dat'

bottom of the page http://www.arrowscripts.com/atl3_dl.shtml

woj · 01-12-2007, 08:21 PM

Quote:

Originally Posted by xApster

thank god for http://www.swiftwill.com

GrouchyAdmin · 01-12-2007, 08:35 PM

Quote:

Originally Posted by abshard

If you upgraded to build 12 of at3 you should have the 'd/informer.dat'

bottom of the page http://www.arrowscripts.com/atl3_dl.shtml

How strange; I checked my upgrade package, and nope, it wasn't in there. Guess I might have grabbed it at a slightly-off build? Who knows. Thanks for the head's up, it IS in this fresh download. Fixed, and reapplied the new CGIs.

com · 01-12-2007, 11:26 PM

rofl zero hour... sorry guys.. this is comedy

01-12-2007, 05:59 PM	#1
spasmo Confirmed User Join Date: Dec 2005 Location: Couch Posts: 2,678	Zero Hour ATX/AT3 Hack *Patch your scripts* My apologies if this is a duplicate. I didn't see it on the first page. If you are running ATX or AT3, please visit http://www.arrowscripts.com/patch.shtml. Your system is only at risk if your signup forms are enabled. __________________ Surfers: Go here for hot babes.

01-12-2007, 06:08 PM	#2
Spunky I need a beer Industry Role: Join Date: Jun 2002 Location: ♠ Toiletville ♠ Posts: 133,940	Was it similar to the TM3 attack? __________________ *YOUR INFORMATION HERE*

01-12-2007, 06:24 PM	#5
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	big heads up, hope they notified everyone by email __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

01-12-2007, 06:24 PM	#6
Spunky I need a beer Industry Role: Join Date: Jun 2002 Location: ♠ Toiletville ♠ Posts: 133,940	Cool..thanks for the info Spasmo __________________ *YOUR INFORMATION HERE*

01-12-2007, 06:55 PM	#8
GrouchyAdmin Now choke yourself! Industry Role: Join Date: Apr 2006 Posts: 12,085	Not sure if this affects other builds, but I just sent them an email: Anyone using the CentOS 4 version of AT3 (at least) will see their admin works, but if they go to the settings page, it bitches about a missing file. This is (mostly) ok. Create an empty file in notepad (or touch on UNIX), named 'informer.dat'. Upload or move to your at3-install/d directory. admin.cgi works again. I'm betting they left debugging on by mistake; there's no use of 'd/informer.dat' in any previous build of admin.cgi. __________________ AIM: GrouchyGfy

01-12-2007, 06:21 PM	#4
MrVids i am a meat popsicle Industry Role: Join Date: Jan 2005 Location: Seattle, WA Posts: 1,070	thanks for the heads up patched mine this morning, should have made a post myself

01-12-2007, 07:00 PM	#9
spasmo Confirmed User Join Date: Dec 2005 Location: Couch Posts: 2,678	It didn't happen to me on FC4, but he whipped those out in a hurry. He's getting some sleep before doing Mandrake and the others he didn't get to. Thanks much for the tip. __________________ Surfers: Go here for hot babes.

01-12-2007, 07:56 PM	#10
xApster Confirmed User Join Date: Jan 2001 Location: Toronto, Canada Posts: 1,188	thank god for http://www.swiftwill.com

01-12-2007, 11:26 PM	#14
com Confirmed User Join Date: Aug 2003 Location: Portland, Oregon Posts: 4,541	rofl zero hour... sorry guys.. this is comedy __________________ Real. Professional. Hosting. .:Expect Nothing Less:. 320-078-843 :: www.realprohosting.com :: [email protected]