Re: [LUG] PHP Worm traffic?

[Simon Waters <simon@xxxxxxxxxxxxxx>]

On 17 Dec 2013, at 17:54, Simon Avery <digdilem@xxxxxxxxx> wrote:

To some extent, the payload is secondary to the method of propogation. Even if the purpose of this worm is primarily to replicate, it will be days or even hours before someone else has another exploiting the same vectors, and perhaps with a different agenda. 

Hmm this is a very easy to exploit vuln, the request sends basically a command to give me a PHP shell on the remote machine, so if it doesn't lock up behind itself it is game over.

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq