NYCPHP Meetup

NYPHP.org

[nycphp-talk] Help... NeverEverNoSanity WebWorm generation 8.

Jeff Siegel jsiegel1 at optonline.net
Wed Dec 22 10:11:07 EST 2004


This seems to be a combination of PHP and phpBB issue.

Personally speaking...if you've got this combination, I think it's time 
to dump phpBB since it seems to often be on the "security vulnerability" 
list.

Jeff

Alan T. Miller wrote:

> It looks like I got slammed by some new PHP vulnerablity. It first 
> appeard that what it did was to replace all your index pages with its 
> own that proclaims "This site is defaced!!!" and then includes ... 
> "NeverEverNoSanity WebWorm generation 8.".
> 
> Well, in an effort to fix this problem, I completely rebuilt apache, 
> mod_ssl, and PHP. And when I tried to upload new index files from my 
> backup, I still get the damn messages but it is as if thay are overlaid 
> on top of my regular pages. So Weird...
> 
> Anyone have any information about this, how to fix, how to clean this 
> up, how to prevent (other than the obvious upgrade your PHP the absolute 
> minute an update comes out?).
> 
> Thanks in advance,
> 
> Alan
> 
> _______________________________________________
> New York PHP Talk
> Supporting AMP Technology (Apache/MySQL/PHP)
> http://lists.nyphp.org/mailman/listinfo/talk
> http://www.newyorkphp.org
> 



More information about the talk mailing list