Home page logo

bugtraq logo Bugtraq mailing list archives

RE: phpBB Worm
From: Chris Ess <securityfocus () cae tokimi net>
Date: Fri, 24 Dec 2004 23:49:47 -0500 (EST)

              while(my @a = getpwent()) { push(@dirs, $a[7]);}

      push(@dirs, '/ ');


Additionally, on Windows the worm would affect files on a single disk.

In generation 9 of the worm, there is the following code after what you

        for my $l ('A' .. 'Z') {
                push(@dirs, $l . ':');

What I get out of this is that the worm should try iterating down every
available drive on a Windows server.  I haven't tested this on a Windows
machine running ActivePerl yet though.


Chris Ess
System Administrator / CDTT (Certified Duct Tape Technician)

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]