According to foreign media reports, Linux and other open-source software are generally less likely to be attacked by viruses or hackers. However, a worm recently discovered has aroused the attention of the open source community. This virus is targeted at PHP, a popular WEB application tool (platform) on Linux.
The worm exploits a vulnerability in a PHP XML-RPC component. Attackers can launch attacks on website servers.
XML-RPC, as part of PHP, is used by products such as PostNuke, Drupal, b2evolution, Xoops, WordPress, PHPGroupWare and TikiWiki. After the message of the Lupper worm is sent out, the developers of these components have successively upgraded or launched the patch package.
Since Linux and its open-source application software are highly secure, anti-virus software vendors have not warned the worm in a timely manner.
XML-RPC's first vulnerability was detected in June this year, and a second security warning was reported in August. Because most users do not upgrade the XML-RPC, the worm gradually spreads.
