bugtraq - Re: new phpBB worm affects 2.0.11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <7A6CA08D-5797-11D9-96A9-000D93C0F38C@teknovis.com>
Date: Sun, 26 Dec 2004 15:40:08 -0800
From: Andrew Farmer <andfarm@...novis.com>
To: Herman Sheremetyev <herman@...bpage.com>
Cc: bugtraq@...urityfocus.com, full-disclosure@...ts.netsys.com
Subject: Re: new phpBB worm affects 2.0.11

On 24 Dec 2004, at 14:06, Herman Sheremetyev wrote:
> My patched phpBB 2.0.11 running on FreeBSD 4.10 was exploited by a new 
> variation of the worm this morning.  I'm attaching the 2 perl scripts 
> it installs, one is an irc bot the other the worm itself.

The worm code attached uses the same old 2.0.10 highlight 
vulnerability. You probably hadn't patched all your phpBB installs 
properly.

Download attachment "PGP.sig" of type "application/pgp-signature" (187 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html