PhpBB-virus Santy er løs - watch out

[Gjest data]

Vet ikke om sw'en på dette forumet er oppgradert, men det finnes altså et 'virus' som retter seg mot php generelt og phpBB spesielt. Ved exploit kan man få tilgang til server, som kan misbrukes til spam o.l.

"Santy brukte Google til å avsløre nettsteder med en bestemt svakhet i gratissystemet phpBB for diskusjonsfora og nyhetsgrupper."

http://www.digi.no/php/art.php?id=114640

Dette er også nevnt på php.net

http://www.php.net

Det er omtrent slik ut i serverloggen:

[sat Dec 18 06:37:14 2004] [error] [client 66.167.212.50] Invalid error redirection directive:

[sat Dec 18 07:19:17 2004] [error] [client 66.221.36.226] File does not exist: /xxx/galaxy_2200.2546

[sat Dec 18 07:19:17 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpbb/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpbb2/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpBB/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpBB2/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpbb/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpbb2/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpBB/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpBB2/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpbb/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpbb2/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpBB/

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] Invalid error redirection directive:

[sat Dec 18 07:19:18 2004] [error] [client 66.221.36.226] File does not exist: /xxx/phpBB2/