Santy:A worm - how vulnerable are we?

[Psquared]

Recently a "worm" was discovered that used the Google search engine (along with others) to find certain vulnerable pHp:BB sites and then insinuated its way in and "defaced" the website. There are a couple of boards that I use that have been so infected. One of them has features similar to this board. Yet, I noticed that this board was not affected.

From what I have read pHpBB software is an "open source" software maintained by the pHpBB group. Just how vulnerable is a Linux system to something like this. Can it infect Linux servers? How about standalone Linux systems like home computers?

[Chas.H]

This board is vBulletin, not pHp:BB so, I think we are safe.
Anyway, Google is all over it (http://www.pcworld.com/news/article/0,aid,119029,00.asp).

[Jman]

Perhaps php updates help fix the vulnerability?

Even if you had a vulnerable phpBB, you would have to have permissions on your site that allowed it to be overwritten.

[Shadow Skill]

Ah permissions, you gotta love em sometimes.

[Psquared]

Ahhh .... this is nice to know.

I love Linux. !!!!! :)

[temoc]

Ahh read my post:
http://www.fedoraforum.org/forum/showthread.php?t=30247

Anyboard using some form of PHP will get zap.
Permission not a factor in this case as some boxes get rooted and bye bye all html,htm,php files.
In my post even my adult sites that i host for some peeps were wipe out all because of a forum running on same site.
Now this week there are several exploits for PHP alone better get PHP 4.3.10 and if using PHPBB better get latest version cause if you only update one or the other YOU WILL GET ZAP!!
I lost 60 boxes.......