phpBB worm

[mechBgon]

I noticed a listing at Network Associates' New-Threats page for something that might interest a few of you:

http://vil.mcafeesecurity.com/vil/content/v_130471.htm

Looks like they're still working on a complete analysis.

 

[Schadenfroh]

This virus spreads on web servers running the phpBB 2.x application. Other systems are not affected.

The worm uses Google to search for target systems to attack, by running a query for text present on web pages that are served by phpBB. When a potential victim site is found, the worm attacks the phpBB software, by exploiting a highlighting vulnerability.

looks fun

 

[sep]

Updated, Thanks!

 

[edmicman]

sooooooo.....if I'm running phpBB, what do I do?

edit: ahhhhh, so 2.0.11 is safe then? whew!

 

[mechBgon]

Heh, my little sister's weird, weird site just got pwned by someone... well, I warned her... :frown:

 

[n0cmonkey]

All of these forum softwares are getting annoying. There are very few groups out there taking security seriously, and something as simple as a google searching worm is owning them all.