PHPBB worm going around!!!

horse[USA] · Unread post by **horse[USA]** » Tue Dec 21, 2004 8:22 pm

A worm is going around the net attacking sites running phpBB <2.0.11 with php <4.3.10.
Version 2.0.11 is the only safe version, upgrade to it now if you are not running it and upgrade php to fix the hole.
Information
http://www.securiteam.com/unixfocus/6J00O15BPS.html
http://www.f-secure.com/weblog/
http://www.phpbb.com/phpBB/viewtopic.ph ... ernosanity

Unread post by **scott** » Wed Dec 22, 2004 4:24 pm

For those of you running Grsec, this doesnt effect you

Griffith · Unread post by **Griffith** » Sat Dec 25, 2004 3:20 am

scott:
could you make a rpm of mod_security?

Unread post by **scott** » Sun Dec 26, 2004 11:12 am

you know I worked on mod_security a while back, it really requires a lot of tuning to get working right in a hosting environment. In the end I just stopped using it. I still might do another one I, but it didnt really solve any problems that grsec and snort werent already covering