Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: phpbb 0 day worm or just too many unpatched boxes? SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
phpbb 0 day worm or just too many unpatched boxes?
We recieved a report of a phpbb 0 day.

Upon investigation, it may be a re-hash of the mosConfig_absolute_path exploit hitting unpatched systems.

We're looking into the report and will update the diary as we get new information.
Chris

140 Posts

Sign Up for Free or Log In to start participating in the conversation!