phpBB worm defacing forums

Just a heads-up in case you don't already know, got this info from the
SomethingAwful forums:

A worm is exploiting a vulnerability in phpBB versions lower than 2.0.11
to deface forums it finds.

MSN search lists some defaced sites:

http://tinyurl.com/4nvep

More info can be found at:

http://www.viruslist.com/en/viruses/encyclopedia?virusid=68388
http://www.f-secure.com/weblog/

--
Dan Ruscoe

Dan Ruscoe wrote

 > Just a heads-up in case you don't already know, got this info from the
 > SomethingAwful forums:
 >
 > A worm is exploiting a vulnerability in phpBB versions lower than 2.0.11
 > to deface forums it finds.

Thanks Dan.

According to phpBB, upgrading to the latest versions of PHP (4 or 5) fixes
this. Thankfully I did so not very long ago!

See:

<a style='text-decoration: underline;' href="http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=248046" target="_blank">http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=248046</a>

I presume this is the same thing they are talking about.

--
Charles Sweeney
<a style='text-decoration: underline;' href="http://CharlesSweeney.com" target="_blank">http://CharlesSweeney.com</a><!-- ~MESSAGE_AFTER~ -->