Full Disclosure mailing list archives

Re: update on the linux worm

From: Filbert <filbert () pandora be>
Date: Sun, 19 Feb 2006 17:20:04 +0100

On Sunday 19 February 2006 16:27, Micheal Turner wrote:

Could you clarify what vulnerabilities are being
exploited in the PHP applications ?


To my knowledge: mambo, phpgroupware and wordpress.
I submitted a sample to Clamav AV yesterday.

AntiVir recognises it as Worm/Linux.Lupper.B,  Kaspersky Anti-Virus as 
Net-Worm.Linux.Mare.e. Others don't.

F.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

update on the linux worm Gadi Evron (Feb 18)
- Re: update on the linux worm Micheal Turner (Feb 19)
  - Re: update on the linux worm Filbert (Feb 19)
    - Re: update on the linux worm Boris Filipov (Feb 19)
- Re: update on the linux worm Stephen J. Smoogen (Feb 20)
- <Possible follow-ups>
- Re: update on the linux worm Juha-Matti Laurio (Feb 19)
- Re: update on the linux worm Juha-Matti Laurio (Feb 19)
  - Re: update on the linux worm Byron Copeland (Feb 22)