Udp.pl scare
| From: | Mike | Date: | Fri, 04 Feb 2005 03:49:21 +0000 |
| Subject: | Udp.pl scare | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-208064@lists.php.net to get a copy of this message | ||
Hello all,
I have been hit twice now with the udp.pl exploit found in phpbb
I thought that upgrading to php 4.3.10 would stop this? Was I wrong?
Here is what it does...
" The attacker installed a UDP flood tool that ran for 2 hours before buzz
was blocked by Network Services. Remote shell programs were also uploaded
and run to give the attackers easier access to the webservers user account.
"