Ubuntu forums compromised

Post Syndicated from corbet original http://lwn.net/Articles/694652/rss

Canonical has disclosed
that the Ubuntu forum system has been compromised. “The attacker had
the ability to inject certain formatted SQL to the Forums database on the
Forums database servers. This gave them the ability to read from any table
but we believe they only ever read from the ‘user’ table. They used this
access to download portions of the ‘user’ table which contained usernames,
email addresses and IPs for 2 million users. No active passwords were
accessed.”