HNGlance

Top Best New Show

Hetzner.de compromised (german email)

http://pastebin.com/YL9Gd4MR

by Noxx • 13 years ago

3 2 13 years ago

PA

Related Stories

Loading related stories...

Comments

2

dermatthias• 13 years ago

Quick overview: They had a Nagios backdoor, which led to a leak of the customer database of their dedicated server administration console (Hetzner Robot).

They are not sure how it happened right know. External security experts are involved.

The customer passwords are SHA256 hashed (thank god!).

---

This one is really serious. With access to this admin console, you can wipe all dedicated servers with one single click. We advised Hetzer before to add more security (two-way authentication, etc.) to the console, but I think not much happened here...

lukashed• 13 years ago

According to their FAQ (http://wiki.hetzner.de/index.php/Security_Issue) direct debit data was probably also compromised.

Source preview

pastebin.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms