Rare worms targeting PHP vulnerabilities Linux security not in

According to foreign media reports, Linux and other open-source software are generally less likely to be attacked by viruses or hackers. However, a worm recently invented has aroused the attention of the open source community. The attack target of this virus is widely used on the Linux platform.

According to foreign media reports, Linux and other open-source software are generally less likely to be attacked by viruses or hackers. However, a worm recently invented has aroused the attention of the open source community. The attack target of this virus is the popular WEB application tool (platform) PHP on the Linux platform.

The worm exploits a vulnerability in a PHP XML-RPC component. Attackers can launch attacks on website servers.

It is reported that as part of PHP, XML-RPC is applied by products such as PostNuke, Drupal, b2evolution, Xoops, WordPress, PHPGroupWare and TikiWiki. After the message of the Lupper worm is sent out, the developers of these components have either upgraded or launched a patch package.

Since Linux and its open-source software have relatively high security, anti-virus software vendors have not warned the worm in a timely manner.

The XML-RPC vulnerability was first invented in June this year, and the second security warning was reported in August. Because most users do not upgrade the XML-RPC, the worm gradually spreads.