RE: phpBB Worm

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> 	eval{
> 		while(my @a = getpwent()) { push(@dirs, $a[7]);}
> 	};
>
> 	push(@dirs, '/ ');

[...]

> Additionally, on Windows the worm would affect files on a single disk.

In generation 9 of the worm, there is the following code after what you
include:

        for my $l ('A' .. 'Z') {
                push(@dirs, $l . ':');
        }

What I get out of this is that the worm should try iterating down every
available drive on a Windows server.  I haven't tested this on a Windows
machine running ActivePerl yet though.

Sincerely,


Chris Ess
System Administrator / CDTT (Certified Duct Tape Technician)

[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux