Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Re: Possible apache2/php 4.3.9 worm
From: Max Valdez <maxvalde () fis unam mx>
Date: Wed, 22 Dec 2004 12:12:20 -0600


http://www.google.com/search?num=100&hl=en&lr=&as_qdr=all&q=allinurl%3A+%22
viewtopic.php%22+%22topic%3D27516%22&btnG=Search
http://www.google.com/search?num=100&hl=en&lr=&as_qdr=all&q=allinurl%3A+%22
viewtopic.php%22+%22t%3D2580%22&btnG=Search
http://www.google.com/search?num=100&hl=en&lr=&as_qdr=all&q=allinurl%3A+%22
viewtopic.php%22+%22p%3D6653%22&btnG=Search

If Google were to block this particular pattern of search request it
would stop the spread of the worm for now.

They are blocking it, at least for me, go try yourself.

Is the expecter behavoir from google :-)

Max
-- 
Linux garaged 2.6.9-ac9 #2 SMP Tue Nov 16 17:07:13 CST 2004 i686 Intel(R) 
Pentium(R) 4 CPU 2.80GHz GenuineIntel GNU/Linux
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GS d- s+:+ a C++ UL+++ P+ L++++ E--- W++ N o-- K w--- O- M-- V-- PS+ PE+++ Y-- 
PGP- t-- 5 X+ R* tv++ b++ DI++ D+ G++ e+++ h--- r+++ z**
------END GEEK CODE BLOCK------
gpg-key: http://garaged.homeip.net/gpg-key.txt
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]