Re: Massala PHP exploit via worm

Article View: be.comp.security

Article #635

#635

From: Filbert
Date: Fri, 24 Dec 2004 14:59

13 lines
1378 bytes

Cyrano wrote:

> Google blokkeert al de requests en de meeste sites waren zeer snel
> terug hersteld. Er waren ook Belgische sites tussen.
>

Een nieuwe variant gebruikt nu Yahoo ipv Google, zoals te verwachten was.


-- 
echo "+++ATH0aaadmin+++ATH0@gmail.com" | sed 's/+++ATH0//g'
 "Remotely-exploitable vulnerability in W2K. Reported: 2/8/2004"
 http://www.eeye.com/html/research/upcoming/20040802-C.html

Technical Details

Message-ID: <5959811.FIuPzYOBrC@127.0.0.1>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!newsswing.news.prodigy.com!prodigy.net!newsfeed.cwix.com!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail

References: <1103779258.014624.13110@z14g2000cwz.googlegroups.com>

Show Full Headers

Complete Article Headers

X-Google-Thread: 113446,1485981469779295
X-Google-Attributes: gid113446,public
X-Google-Language: DUTCH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!news.glorb.com!newsswing.news.prodigy.com!prodigy.net!newsfeed.cwix.com!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail
Message-ID: <5959811.FIuPzYOBrC@127.0.0.1>
From: Filbert <+++ATH0aaadmin+++ATH0@gmail.com>
Subject: Re: Massala PHP  exploit via worm
Newsgroups: be.comp.security
Reply-To: +++ATH0aaadmin+++ATH0@gmail.com
References: <1103779258.014624.13110@z14g2000cwz.googlegroups.com>
Lines: 14
Organization: /dev/null
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
Date: Fri, 24 Dec 2004 14:59:26 GMT
NNTP-Posting-Host: 213.118.231.106
X-Complaints-To: abuse@telenet.be
X-Trace: phobos.telenet-ops.be 1103900366 213.118.231.106 (Fri, 24 Dec 2004 15:59:26 MET)
NNTP-Posting-Date: Fri, 24 Dec 2004 15:59:26 MET

Reply to Parent Message