Phpbb include vulnerability scanning
Incidents.org is reporting scanning for phpbb include vulnerabilities through Google. Apparently there is an IRC botnet being “cultivated”. They are scanning for versions of phpBB prior to 2.0.10, the current release is 2.0.18.
The new IRC bot scans for vulnerable systems using Google, when successful it announces that “oopz and sirh0t and Aleks g0t pwned u!”, and has UDP flooding and UDP/ICMP/TCP scanning capabilities.
The file phpbb_patch was found on exploited systems.
Also from incidents.org …
Please update your files now. Phpbb forum support guru “Techie-Micheal” points out that “running update_to_latest.php on their install only updates the database (and is clearly stated in the documentation), files need to be updated seperately for which there are several methods”.
Popularity: 1% [?]
Related Posts - What a week.... I think it's time to pass along a long story of what's gone on over the last week or so here and some of the reasons there hasn't been anything posted. Generally, I would say that work has been busy, but something happened last week that went a bit beyond......
- WMF Exploit -- it's worse... This is going to be a rough start to the new year for IT staff and computer users.... There's coverage at Incidents.org, the sunbeltblog and f-secure of the latest twist in what will likely be a BIG mess to clean up. It looks like there's a someone spamming emails to......
- Oh and ANOTHER Powerpoint vulnerability too.... Sometimes you feel like the little Dutch boy of myth/legend with his finger trying to plug the hole in a dam.... Incidents bring us this as well.... another powerpoint vulnerability seems to have been disclosed. MS has an advisory. All currently supported Office versions are vulnerable (even on Mac?) Workarounds......
Related Websites - Teaching an Old Boat New Tricks It's not every day that you have to explain how your boat managed to climb up onto the dock to say hello, but one family is trying their best not to laugh themselves to tears as they try to explain exactly that. Yesterday morning, a local family was preparing for......
- Creating a Blog Video Online About two years ago, blogging hit a surge that allowed its way into the mainstream, and now everybody is blogging for a wide variety of different reasons. Blogs resemble web-based public diaries of sorts, where the creator can record their thoughts, their opinions, questions and answers and essentially anything else......
- Optimizing Flash Files For The Search Engines What is a Flash Movie? A flash movie, or shock wave file (SWF), is the file format published when a Flash movie is exported. A SWF file can also be exported by several other Macromedia or Adobe Products. The SWF is usually an animation, dynamic menu, or highly interactive web-based......
Similar Posts
- Microsoft security roundup
- Infocon Green and apple updates
- Microsoft Updates for October and bugs on the loose
- Microsoft August Updates
- WMF exploit through indexing software