| Author |
 Topic  |
|
|
MarcelG
Retired Support Moderator
Netherlands
2625 Posts |
 Posted - 22 December 2004 : 07:27:57
|
quote:
Source: http://www.viruslist.com/en/alerts?alertid=156678925
Net-Worm.Perl.Santy.a
12.21.04 17:33, GMT +0300, Moscow | comment
Status : severe risk
Kaspersky Lab has detected a new worm which propagates using a vulnerability in phpBB, which is used to create Internet forums. The vulnerability is present in phpBB versions up to 2.0.11.
The worm overwrites all .asp, .php, .htm and .shtm files on infected websites with its own code.
Further information will be available in the Virus Encyclopaedia in the near future.
All users of phpBB are recommended to update to version 2.0.11
This new worm does not represent any threat to users visiting infected sites as it will not infect computers being used to view infected sites.
An urgent update to Kaspersky Anti-Virus databases has already been issued.
Woooow....automatically defacing phpBB sites....
Let's hope they don't create a Snitz-variant of this worm...
|
portfolio - linkshrinker - oxle - twitter |
|
|
PeeWee.Inc
Senior Member
United Kingdom
1893 Posts |
Posted - 22 December 2004 : 07:51:23
|
It's a nasty, nasty little critter  |
De Priofundus Calmo Ad Te Damine |
 |
|
|
HuwR
Forum Admin
United Kingdom
20584 Posts |
Posted - 22 December 2004 : 10:19:32
|
| it automatically defaces any website on the same server too, so just because you have a snitz forum doesn't matter, if someone on the same server has a phpbb then you are just as likely to get your site hacked. |
|
|
|
taropatch
Average Member
USA
741 Posts |
Posted - 22 December 2004 : 12:15:03
|
quote:
Originally posted by HuwR
it automatically defaces any website on the same server too, so just because you have a snitz forum doesn't matter, if someone on the same server has a phpbb then you are just as likely to get your site hacked.
I speak from experience. This is no fun. |
|
|
|
MarcelG
Retired Support Moderator
Netherlands
2625 Posts |
|
|
taropatch
Average Member
USA
741 Posts |
Posted - 22 December 2004 : 16:34:42
|
quote:
Originally posted by marcelgoertz
on the same *server* ??? d*mn....[:xx]
Yes, totally out of my control. Here's what I was posting yesterday... Server hacked |
|
|
|
-gary
Development Team Member
406 Posts |
Posted - 27 December 2004 : 12:12:08
|
| And the lesson for today is that you should never allow processes write permission to your site files and run processes like PHP under their own login, NOT the admin account. |
KawiForums.com
 |
|
|
| |
Topic |
|
Topic Locked
