US SourceForge Sep 2012 Malware Attack (Q15895)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US SourceForge Sep 2012 Malware Attack |
A data breach risk event |
Statements
DCE38CAA-1105-4FF0-A43C-19CF2905F084
September 2012
0 references
Unknown attackers compromised a download mirror server for the SourceForge software repository, rigging the installer package for phpMyAdmin, a popular Web-based MySQL database administration tool, with a backdoor.SourceForge is a Web-based collaborative software development and repository system that hosts over 324,000 software development projects and serves 46 million users. The service is operated by Geeknet, a company based in Fairfax County, Virginia, U.S. One of the SourceForge.net mirrors, namely cdnetworks-kr-1, was being used to distribute a modified archive of phpMyAdmin, which includes a backdoor, the phpMyAdmin development team said Tuesday in a security advisory. This backdoor is located in file server_sync.php and allows an attacker to remotely execute PHP code. The modifie (English)
