[clue-tech] php

[Jed S. Baer]

On Mon, 20 Dec 2004 12:57:08 -0700
Mike Staver wrote:

> I can't find any info on this worm, so I shut down apache on my server 
> until I can find an updated php rpm.  I ran the latest chkrootkit, but 
> it didn't find anything - but then again, this worm appears to be very 
> new since Google doesn't contain any search results for it yet.

The report I saw (Slashdot? or The Register?) said it was attacking only
phpBB sites. Are you running phpBB?

Also reported it doesn't do anything but deface the sites.

jed
-- 
http://s88369986.onlinehome.us/freedomsight/

... it is poor civic hygiene to install technologies that could someday
facilitate a police state. -- Bruce Schneier