North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Sanity worm defaces websites using php bug

  • From: cw
  • Date: Tue Dec 21 15:45:36 2004

Does anyone have any more detail on exactly what this thing does after 
it gets into a system?

The cgi platform for a company I use has been hit and the effect is 
not just limited to phpBB, it seems to get into the server and then go 
through everything it can write to..

I lost a copy of UBB to this worm even though I don't rund phpBB off 
the same vhost.

Gonna be a nightmare for server ops to ensure that all client copies 
of phpBB are patched..