Openssl is a handy utility to create self-signed certificates. You can create self-signed certificates using commands or automate them using a shell script by following this guide. “As members of our community of Comodo Forum users we want to reassure you that we have put in place measures to ensure that vulnerabilities in third party software, such as vBulletin, will be patched immediately when patches become available.In this guide, we have given step-by-step guides on how to create self-signed certificates using the OpenSSL utility.

Also we aren’t notified about the breach until now.”Ĭomodo itself said: “We deeply regret any inconvenience or distress this vulnerability may have caused you, our users. customers were aware of it since 3 yearsĬomodo One’s team told us: “As far as our company is concerned none of our servers have been breached. Many researchers were selling this exploit for years. The recent vBulletin pre-auth RCE 0day disclosed by a researcher on full-disclosure looks like a bugdoor, a perfect candidate for 2020. Following the public disclosure Chaouki Bekrar, the CEO of Zerodium, a zero-day exploits market platform, said the “bugdoor” had been circulating in the exploit community for three years. The vulnerability that gave the attackers access was located in vBulletin, a popular server application for website comment forums.Ī vulnerability in vBulletin is manna from heaven for hackers as it’s known to be used by organisations such as NASA, games publish EA and games distribution platform Steam. All vBulletin Cloud sites have already been patched. Enterprise security teams can access the patch here.

Comodo personal