1
rabideau
XOOPS SECURITY problem!!! https hijacking of a xoops site name-- HELP!
  • 2006/4/13 15:12

  • rabideau

  • Home away from home

  • Posts: 1042

  • Since: 2003/4/25


I just discovered that someone is trying to hijack one of my XOOPS sites via improper use of https. The site in question is http://manyroads.info and https://manyroads.info

Has anyone encountered a similar problem? What do I do to fix this problem???

Thanks.

--followup note---

I found this article which may indicate that any XOOPS site is vulnerable to the problem:

http://marc.theaimsgroup.com/?l=bugtraq&m=107247844327956&w=2

I hope I'm wrong.
Pax vobiscum,
...mark

may the road rise to meet your feet!

http://treemagic.org

2
davidl2
Re: XOOPS SECURITY problem!!! https hijacking of a xoops site name-- HELP!
  • 2006/4/13 17:18

  • davidl2

  • XOOPS is my life!

  • Posts: 4843

  • Since: 2003/5/26


Thank you Mark, I've brought this to the attention of the relevent people.

3
rabideau
Re: XOOPS SECURITY problem!!! https hijacking of a xoops site name-- HELP!
  • 2006/4/13 17:25

  • rabideau

  • Home away from home

  • Posts: 1042

  • Since: 2003/4/25


Here's a brief update on what happened and perhaps it speaks to a security issue, perhaps not.

I have a server but the server dns address is shared (my domain dns is not unique-- something I think I'll fix!) Because the dns is shared the certificate of the firm with the SSL certificate hijacks my domain name. My ISP fixed the problem. However I think everyone should be aware of this problem and take appropriate action to prevent the problem (and fright) I just went through!


Pax vobiscum,
...mark

may the road rise to meet your feet!

http://treemagic.org

Login

Who's Online

372 user(s) are online (287 user(s) are browsing Support Forums)


Members: 0


Guests: 372


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Nov 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits