[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm
- To: full-disclosure@xxxxxxxxxxxxxxxx
- Subject: Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm
- From: Ron Brogden <domains@xxxxxxxxxxxxx>
- Date: Tue, 21 Dec 2004 10:43:38 -0800
On December 21, 2004 07:32, Alex Schultz wrote:
> Some of the sites I administer were alledgedly hit by a worm last night.
> It overwrote all .php/.html files that were owner writable and owned by
> apache.
> <ADDRESS><b>NeverEverNoSanity WebWorm generation 17.</b></ADDRESS>
Looks like this is the fallout from a recent phpBB hole:
http://www.pcpro.co.uk/news/67505/santya-sparks-messageboard-infection-epidemic.html
Cheers
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html