Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Sanity worm defaces websites using php bug

  • From: sgorman1
  • Date: Tue Dec 21 16:04:35 2004

 there is this from f-secure with some detail of after effects.  

http://www.f-secure.com/v-descs/santy_a.shtml


----- Original Message -----
From: cw <nanog@fidei.co.uk>
Date: Tuesday, December 21, 2004 3:47 pm
Subject: Re: Sanity worm defaces websites using php bug

> 
> Does anyone have any more detail on exactly what this thing does 
> after 
> it gets into a system?
> 
> The cgi platform for a company I use has been hit and the effect 
> is 
> not just limited to phpBB, it seems to get into the server and 
> then go 
> through everything it can write to..
> 
> I lost a copy of UBB to this worm even though I don't rund phpBB 
> off 
> the same vhost.
> 
> Gonna be a nightmare for server ops to ensure that all client 
> copies 
> of phpBB are patched..
> 
> 





Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.