[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm

To: full-disclosure@xxxxxxxxxxxxxxxx
Subject: Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm
From: dk <dk@xxxxxxxxxxxxxxxx>
Date: Wed, 22 Dec 2004 20:12:57 -0600

Barrie Dempster wrote:

On Wed, 2004-12-22 at 09:03 +0000, DanB UK wrote:
Hi,
I was wondering if anyone has a sample of this.
I'm giving a talk at 21c3 and would like to provide some analysis on it.
Cheers,
Daniel.
http://www.k-otik.com/exploits/20041222.sanityworm.pl.php

Do read the code carefully though Dan. Right off hand I can see errors that were also in the code posted to bugtraq on the 20th; K-OTik may have added more, dunno.


--
dk
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Follow-Ups:
- Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm
  - From: DanB UK

References:
- [Full-Disclosure] Possible apache2/php 4.3.9 worm
  - From: Alex Schultz
- Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm
  - From: Ron Brogden
- Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm
  - From: DanB UK
- Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm
  - From: Barrie Dempster

Prev by Date: Re: [Full-Disclosure] E-mail tracking finds murderess and baby in kidnap-homicide case.
Next by Date: Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T-
Previous by thread: Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm
Next by thread: Re: [Full-Disclosure] Possible apache2/php 4.3.9 worm
Index(es):
- Date
- Thread