Re: PHP Exploit via phpBB?

From: Date: Thu, 23 Dec 2004 14:39:03 +0000
Subject: Re: PHP Exploit via phpBB?
References: 1 2 3  Groups: php.general 
Request: Send a blank email to php-general+get-205078@lists.php.net to get a copy of this message
Ashley M. Kirchner wrote: <snip>
# strings r0nin [snip] 
       socket
       bind
       listen
       PsychoPhobia Backdoor is starting...
[snip] Might want to run nmap (or other equivalent program) on your system.
Yeah, one of the first things I did was a netstat -a. Didn't find anything running that wasn't supposed to be. This r0nin program downloaded a IRC server (BrazLink), and tried to install it, but my compiler is not in the system path, and can't be used by non-user accounts. -- John C. Nichel ÜberGeek KegWorks.com 716.856.9675 john@kegworks.com

« previous php.general (#205078) next »