Attackers have used phpMyAdmin, an open source database administration tool, to access the WineHQ project’s database and harvest users’ appdb and bugzilla access credentials. An incident report on the project’s mailing list says that the attackers also obtained users’ encrypted access passwords; whether the attackers will be able to crack these depends on their motivation and the strength of individual passwords, said the report. Therefore, the attackers can potentially also access other services if a WineHQ database user has used the same access credentials there.
