Be Advised!: New Santy Strain Attacks All PHP Web Scripts!
Date: Saturday, December 25 @ 18:45:40 CET
Topic: Security
Zhen-Xjell writes "Folks, it seems that Santy worm has taken on a new strain. It also searches Yahoo now in addition to Google, but it looks for any PHP scripts with all possible arguments passed thru in the HTTP GET. This worm tries all arguments in your PHP script to throw in a shell commands that access a particular website, download some text files into /tmp, and then execute them using Perl...
SOURCE: http://castlecops.com/article-5640-nested-0-0.html (Full Story)
|
|