new * vBulletin 4.1.x & 5.0.x Security Issue

[atcspaul]

they have a new issue and say should not effect 3.0 but say this


The directories that should be deleted are:

4.x - /install/

5.x - /core/install

On vB5, make sure you delete only the install folder, not the core folder.
After deleting these directories your sites can not be affected by the issues we’re currently investigating.

vBulletin
3.x would not be affected by these issues. However if you want the best
security precautions, you should delete your install directory as well.

attached is a picture of my folders, do I delete the whole install folder or just parts. thank you in advance
Attachment 378

[Matt]

Can you link us to the official statement from vBulletin?

[atcspaul]

here you go matt
Potential vBulletin Exploit (vBulletin 4.1+, vBulletin 5+) - vBulletin Community Forum

[Matt]

Thanks for referencing the article. Yep, that should be the install folder they are talking about. I'd make sure you have a local copy of it before removing it from the server just in case something goes wrong.

[atcspaul]

thank you!

[Matt]

Glad we could help.

[atcspaul]

how do I make a local copy? clicked on copy but not sure what to do

[Matt]

Most people use an FTP program do upload or download files to a server. FileZilla is a good free one. FireFTP for Firefox is good and also free.

You could make a backup in cpanel as well, then download the archive of the entire site.

[atcspaul]

thank you matt