Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 507
Alerts This Week
Warning Icon 1 507

SourceForge Compromise Requires Prompt Password Changes From Developers

Calendar May 29, 2001 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

incident report cybersecurity security breach password management open source platform developer response
The servers of open source development site SourceForge have been compromised. Active subscribers to the site, which is owned by VA Linux, received the following terse message from its administrators. "This week, one of our systems was compromised. We have promptly . . . The servers of open source development site SourceForge have been compromised. Active subscribers to the site, which is owned by VA Linux, received the following terse message from its administrators. "This week, one of our systems was compromised. We have promptly taken the necessary steps to correct this situation," the message said.

"You have been contacted, because according to our log files, you have used SourceForge during the past week and may have used the system that was compromised."

SourceForge has asked developers who used the system during the period when it was compromised to change the password but has supplied little in the way of further information on the attack. No information on the crack has been posted on SourceForge's Web site, and news of the security breach was only brought to light after a story was posted to Slashdot.

The link for this article located at The Register is no longer available.