phpBB worm defacing forums

Just a heads-up in case you don't already know, got this info from the
SomethingAwful forums:

A worm is exploiting a vulnerability in phpBB versions lower than 2.0.11
to deface forums it finds.

MSN search lists some defaced sites:

http://tinyurl.com/4nvep

More info can be found at:

http://www.viruslist.com/en/viruses/...?virusid=68388
http://www.f-secure.com/weblog/

--
Dan Ruscoe

Dan Ruscoe wrote:
: Just a heads-up in case you don't already know, got this info from the
SomethingAwful forums:
:
: A worm is exploiting a vulnerability in phpBB versions lower than 2.0.11
to deface forums it finds.
:
: MSN search lists some defaced sites:
: http://tinyurl.com/4nvep
:
: More info can be found at:
: http://www.viruslist.com/en/viruses/...?virusid=68388
: http://www.f-secure.com/weblog/

Ouch that bites.. but I know I am safe: *grin*
Powered by phpBB 2.0.11

Dan Ruscoe wrote

> Just a heads-up in case you don't already know, got this info from the
> SomethingAwful forums:
>
> A worm is exploiting a vulnerability in phpBB versions lower than 2.0.11
> to deface forums it finds.

Thanks Dan.

According to phpBB, upgrading to the latest versions of PHP (4 or 5) fixes
this. Thankfully I did so not very long ago!

See:

http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=248046

I presume this is the same thing they are talking about.

--
Charles Sweeney
http://CharlesSweeney.com

"Dan Ruscoe" <danruscoe@gmail.com> skrev i melding
news:MPG.1c328e8ce89bcf3929@news.btopenworld.com.. .
> Just a heads-up in case you don't already know, got this info from the
> SomethingAwful forums:
>
> A worm is exploiting a vulnerability in phpBB versions lower than 2.0.11
> to deface forums it finds.
>
> MSN search lists some defaced sites:
>
> http://tinyurl.com/4nvep
>
> More info can be found at:
>
> http://www.viruslist.com/en/viruses/...?virusid=68388
> http://www.f-secure.com/weblog/

Actually, I heard about this from my webhost earlier today (or "yesterday"
in this timezone). They spent about an hour going through each of their
servers, disabling ALL phpBB installations that weren't upgraded.

--
Kim André Akerø
- kimandre@NOSPAMbetadome.com
(remove NOSPAM to contact me directly)