Sanity worm defaces websites using php bug

Tue Dec 21 20:47:10 UTC 2004

Does anyone have any more detail on exactly what this thing does after 
it gets into a system?

The cgi platform for a company I use has been hit and the effect is 
not just limited to phpBB, it seems to get into the server and then go 
through everything it can write to..

I lost a copy of UBB to this worm even though I don't rund phpBB off 
the same vhost.

Gonna be a nightmare for server ops to ensure that all client copies 
of phpBB are patched..