The NetAttack of the Day is the corruption of the site belonging to open source forum software phpBB. Some are claiming that the exploit was the result of a flaw in the phpBB software.
The leaders of the phpBB community are insisting, and I believe them, that they think the flaw was in another part of the webhosting software (awstat), and that they have no indication that this is a flaw in phpBB. Again, I find their analysis believable.
Here's from their current report:
It is actually quite fustrating at present that some hosting providers are asking or forcing their customers to remove installs of phpBB 2.0.11 due to the loss of phpbb.com. As I say above, our best available information right now is that phpBB was not to blame. If a hosting provider knows different perhaps they can inform us (along with details of how they know!).
I've evaluated phpBB in the past, and I think now is the time to show my support by setting up a phpBB forum on one of my sites. Over the next few days I'll be installing it over on my infoPawtuckaway.com site. More later.
Posted by jackhodgson at February 9, 2005 09:38 AM