phpBB 2.0.8a released

Posted: Wed Apr 07, 2004 4:19 am

Quote:

The bug can allow attackers to obtain password hashes, all existing users of phpBB 2.0.x make the change specified below, it is highly recommended.

It's only a simple modification:

http://phpbb.com/phpBB/viewtopic.php?f=14&t=185180

Can someone confirm it's Ok to apply directly because it shouldn't need a phpnuke conversion?

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

This is in Chatserv's fix pack from 4/1 [ Only registered users can see links on this board! Get registered or login! ]

Posted: Wed Apr 07, 2004 8:47 pm

Thanks, Raven.

I have been trying to download those files from NukeResources for a week or so now but the site has been dead.

Are they held anywhere else?

Posted: Wed Apr 07, 2004 8:51 pm

Not that I know of. I'll ask him to let me add them here.

Posted: Wed Apr 07, 2004 9:04 pm

The problem with the sites is being worked on, i'm sure it will be solved soon, the patches are a tad big so i would have to wait til i finally get my dsl to be able to keep a copy at different locations, as i type this i can access NukeResources, NukeFixes and NukeForums which i was not able to this morning so hopefully whatever has been wrong with them (which resembled a dns problem as some could access them while others including me couldn't) might be close to being fixed.

Posted: Wed Apr 07, 2004 9:10 pm

Thanks, Chatserv.

I got to NukeFixes alright and am downloading the fixes but NukeResources won't answer.

All the best,
Ron....

Posted: Wed Apr 07, 2004 9:12 pm

I take that back: trying to download from Nukefixes gets a 'Cannot find server' msg.

I will try again in a day or two.

All the best for the weekend,
Ron...