Keane Insight

Updates

A compilation of the latest information about viruses and worms, security issues and patches to rectify the same.

McAfee reports Linux/Lupper.worm

McAfee has reported a vulnerability, the Linux/Lupper.worm that spreads by exploiting Web servers hosting susceptible PHP/CGI scripts. The worm attacks the Web server by sending malicious requests on port 80, and if the user server is running one of the vulnerable scripts at specific URLs, a copy of the worm is downloaded and executed. Like its predecessors, the infected computers form a global network of compromised servers based on peer-to-peer communication principles. The network can be used, for example, for launching Distributed Denial of Service (DDoS) attacks or other purposes because it can accept remote commands. It is also capable of harvesting e-mail addresses stored in files on the Web server.