New Worm attacks Boards

[Sgood1971]

Link (http://msnbc.msn.com/id/6742668/)

Is this board vulnerable? I would hate to lose it even for a day or two.

[hard candy]

It must have already attacked that link, all I get is a blank page. :)
What kind of worm, a php worm? a Win2003 worm? a java worm? a vbulletin worm?

Edit: Firefox would not show MSN.com for some reason (?) but IE6 showed it fine, I wonder why?
"widely used message board software called PHP Bulletin Board", this one uses vbulletin so it should be OK. There are some nervous members with PHP bulletin boards, though.

[serz]

Originally posted by hard candy
Edit: Firefox would not show MSN.com for some reason (?) but IE6 showed it fine, I wonder why?

Yes, it simply sucks. I wonder why IE doesn't use the standards too.

:(

[MorphiusFaydal]

my firefox showed it fine...

hum...

[hard candy]

My Firefox at work would not show it (running on Win2000) but both my Linux and WinXP Firefox showed it fine. Oh well. C'est la vie.

[glasdave]

I've had problems all day. Been trying to get to this forum since 1:00 mst. And the link comes up with malformed url in Konq.

[gehidore]

Originally posted by hard candy
My Firefox at work would not show it (running on Win2000) but both my Linux and WinXP Firefox showed it fine. Oh well. C'est la vie.

heh, I just tried that as well on a 2k box with firefox no go, but firefox on my desktop worked fine (gentoo) USER ERROR!

[sharth]

Originally posted by Sgood1971
Link (http://msnbc.msn.com/id/6742668/)

Is this board vulnerable? I would hate to lose it even for a day or two. No. If you read the article it affects PHP Bulletin Board, not vBulletin, which is what we use.

:edit: Well, actually. It's apparently more of a php issue itself. http://www.php.net/release_4_3_10.php

But still, the msnbc article is talking about a virus that exploits that hole in php but only works on phpbb apparently. So... Even though it could potentialy affect our site, I doubt that there is any reason for you to worry.

[Sgood1971]

Originally posted by sharth
No. If you read the article it affects PHP Bulletin Board, not vBulletin, which is what we use.

I read the article, I just don't know anything about bulletin board software and kinda got worried. :o

[chatins]

The worm appears to be knocking out MySQL servers at an alarming rate with denial of service attacks. If your board is on a shared server with an infected board, expect the lights to go out!!!

****************
Unable to connect to database !

MySQL said: Too many connections
****************

:o

[madcompnerd]

And people told me I was crazy for writing a flat file board.

[leonpmu]

I thought that you could set the maximum number of connectionas in order to not gets DOS'd. ALthough once I have a friends machine badly conf'ed and he box kept DOS'sing a cups server in the network, what a laugh!!!

[irlandes]

When you have problems on a URL with Firefox, sometimes they simply refuse to respond to any browser that is not I.E. The answer is to google for User Agent Switch extension for firefox. it is an .xpi file, and when you get it downloaded, you find it in a file browser, and drag it and drop it into an open Firefox window. It then automatically loads itself, and tells you to restart firefox (not reboot, just restart firefox) to enable it.

To use it, click on TOOLS in firefox menu, and click on I.e. 6 option and it will present itself as I.E. 6.0

All is not simple. For example, Yahoo mail may not work in firefox if you log in as IE 6 on firefox. I think Yahoo configures itself to match your browser, thus it won't work right on firefox. To make it work, log out, change ToOLs i.d. back to default, and then log in to Yahoo mail again and it will work right.

[sharth]

Easiest fix for this type of problem is that its not that the pipe is being filled (the amount of bandwidth the server can handle), but rather, its that mysql is limited by the server and it simply refuses to answer some queries. Easiest solution, block all ips but the required ones from accessing the mysql server from a firewal.

Originally posted by leonpmu
I thought that you could set the maximum number of connectionas in order to not gets DOS'd. ALthough once I have a friends machine badly conf'ed and he box kept DOS'sing a cups server in the network, what a laugh!!!