Net Worm uses Google to Spread

[His Eminence]

I'm sure most of you already saw this on Slashdot.

http://it.slashdot.org/article.pl?si...35235&from=rss

I'm kinda sketchy on the details, as I'm busy in the middle of upgrading my phpBB install, but it seems pretty dangerous. A lot of sites have already been defaced.

I know some team sites use phpBB or atleast PHP to run their site, so make sure its secure. (Rumors are that is actually a PHP exploit compounded by the recent highlight exploit in phpBB.)

[Joe Ross]

Isn't that just an exploit to the problem posted about here? http://www.chiefdelphi.com/forums/sh...ad.php?t=31709

[Matt Adams]

Originally Posted by His Eminence

(Rumors are that is actually a PHP exploit compounded by the recent highlight exploit in phpBB.)

This is not a rumor.

There is a known exploit in PHP itself (the programming language). You should upgrade all servers to at least PHP version 4.3.10 and Zend Optimizer to version 2.5.7.

However, these are completely separate issues. Just upgrading PHP on the servers to the current version will not fix exploits in PHPbb.

Matt

[CrazyCarl461]

Man oh man, is that what happened to our site?

That doesn't look very fun.

edit: It looks like our speedy admin is already on it.

[team222badbrad]

I saw this on monday. I was visiting www.farcrygame.com

At first I thought it was a thing blocking the website from the school.

(I was at my high school on my computer account that is still active even though I graduated from there in June...)

They fixed the site the next day.

[Matt Adams]

Originally Posted by CrazyCarl461

Man oh man, is that what happened to our site?

That doesn't look very fun.

edit: It looks like our speedy admin is already on it.

Yes it is. Here's quick patch information, you should just need to fix that one file:

http://www.phpbb.com/phpBB/viewtopic.php?t=240513

Matt

[Aaron]

scary

[JohnBoucher]

A reminder to all users of php-BB. UPDATE. It's still out there and will come back.

http://www.cbronline.com/article_new...C-F67044266D35

[Dekker Avesque]

Ah yes, I heard about this awhile ago here.

I haven't heard too many details about the actual PHP exploit, but I don't think it affects too many people.

[the_mayor]

Man some people have way too much time on thier hands. I sure hope our website doesn't get infected.