[olug] lupii Worm

[Jon H. Larsen]

If you haven't seen this yet, I would suggest reading it, especially if 
you run websites for other people.

XML-RPC for PHP Vulnerability Attack
http://isc.sans.org/diary.php?storyid=823 

I have seen probes on one of my boxes looking for the vulnerable versions 
of these files.  Luckily, I'm up to date, and not really using the 
xmlrpc.php functionality.

Check your logs, etc.

Jon L.

-- 
Jon H. Larsen  - relayer -at- levania -dot- org
Omaha Linux Users Group - http://www.olug.org/
AnimeSunday.org - http://www.animesunday.org/
ICQ#: 10412618 - http://www.levania.org/~relayer/
GPG/PGP Pubkey - http://www.levania.org/~relayer/relayerpubkey.txt