phpBB en maintenance suite à une attaque

Le site de phpBB est en maintenance forcée suite à une attaque 0-day.

Maintenance

We are sorry to report that we have been attacked through a 0-day-exploit in our PHPList installation (responsible for the mailing list about new releases). phpBB.com will remain unavailable while we work to recover. No vulnerabilities have been found in the phpBB software itself.

You can download phpBB here: http://www.ohloh.net/p/phpbb

You can get support at the temporary support forums or on IRC:
chat.freenode.net #phpbb

A more detailed explanation about the incident.

Press Contact: If you need to get in contact with the management, please email phpbb_press (at) marshalrusty (dot) com.

– the phpBB team

Pas moins de 20 000 mots de passe ont ainsi été subtilisés et partagés. Comme souvent, une analyse sur la complexité des mots de passe a été faite :