Full Disclosure mailing list archives
Re: Re: Possible apache2/php 4.3.9 worm
From: Max Valdez <maxvalde () fis unam mx>
Date: Wed, 22 Dec 2004 12:12:20 -0600
http://www.google.com/search?num=100&hl=en&lr=&as_qdr=all&q=allinurl%3A+%22 viewtopic.php%22+%22topic%3D27516%22&btnG=Search http://www.google.com/search?num=100&hl=en&lr=&as_qdr=all&q=allinurl%3A+%22 viewtopic.php%22+%22t%3D2580%22&btnG=Search http://www.google.com/search?num=100&hl=en&lr=&as_qdr=all&q=allinurl%3A+%22 viewtopic.php%22+%22p%3D6653%22&btnG=Search If Google were to block this particular pattern of search request it would stop the spread of the worm for now.
They are blocking it, at least for me, go try yourself. Is the expecter behavoir from google :-) Max -- Linux garaged 2.6.9-ac9 #2 SMP Tue Nov 16 17:07:13 CST 2004 i686 Intel(R) Pentium(R) 4 CPU 2.80GHz GenuineIntel GNU/Linux -----BEGIN GEEK CODE BLOCK----- Version: 3.12 GS d- s+:+ a C++ UL+++ P+ L++++ E--- W++ N o-- K w--- O- M-- V-- PS+ PE+++ Y-- PGP- t-- 5 X+ R* tv++ b++ DI++ D+ G++ e+++ h--- r+++ z** ------END GEEK CODE BLOCK------ gpg-key: http://garaged.homeip.net/gpg-key.txt _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Possible apache2/php 4.3.9 worm, (continued)
- Re: Possible apache2/php 4.3.9 worm Barrie Dempster (Dec 22)
- Re: Possible apache2/php 4.3.9 worm dk (Dec 22)
- Re: Possible apache2/php 4.3.9 worm DanB UK (Dec 23)
- Re: Possible apache2/php 4.3.9 worm dk (Dec 27)
- Re: Possible apache2/php 4.3.9 worm milw0rm Inc. (Dec 22)
- Re: Re: Possible apache2/php 4.3.9 worm morning_wood (Dec 22)
- RE: Re: Possible apache2/php 4.3.9 worm Patrick Nolan (Dec 22)
- Re: Re: Possible apache2/php 4.3.9 worm Max Valdez (Dec 23)