phpBB worm doing the rounds

[Char]

Just heard of a worm which is apparently doing the rounds and infecting phpBB boards. Anything below 2.0.11 is apparently susceptible.

More information here:
http://www.viruslist.com/en/viruses/encyclopedia?virusid=68388

As the link says, you can see what it's been doing here:
http://beta.search.msn.com/results.aspx?q=%22this+site+is+defaced%21%21%21%22&FORM=QBRE

Just a heads up, I think.

[RevenG-D]

I was wondering what was wrong with phrecwenci's site...
_________________

http://www.revengd.net/index.php

[Cutriss]

We've had this fix in place for some time. This is an exploit that was made visible a month ago, but is now being taken advantage of by a worm writer. The reason it's so visible is because the worm doesn't necessarily need the phpBB vulnerability to exist. If you're running on a shared server and one user on the server has an old phpBB install that's vulnerable, he/she can get infected and then pass it along to you. We don't use a shared server, so we're not vulnerable to that attack vector either.

At any rate, thanks for the heads up.
_________________

Sentient Mode is capable...

[Char]

Wicked, didn't realise it was so old. sherl0k seemed to imply that DDRFreak's version is inaccurate, which would likely mean you are sorted, but i'd hate to see this place get boned.

[Cutriss]

Yeah, we have a lot of custom hacks and modifications that we've implemented - having to re-implant them every time there's a minor modification to phpBB would be a royal headache. We just patch in the relevant changes as needed.
_________________

Sentient Mode is capable...

[Phrekwenci]