Unix worm that exploits vulnerable PHP/CGI scripts

Please secure and patch your PHP scripts, especially the one that uses xml-rpc protocol. The Linux/Lupper.worm (a variant of BSD/Scalper) might infect your system.

This worm spreads by exploiting specific PHP/CGI script vulnerabilities that could be hosted on the following URLs:

….
# http://[website]/stats/
# http://[website]/xmlrpc.php
# http://[website]/xmlrpc/xmlrpc.php
# http://[website]/xmlsrv/xmlrpc.php
# http://[website]/blog/xmlrpc.php
# http://[website]/drupal/xmlrpc.php
# http://[website]/community/xmlrpc.php
# http://[website]/blogs/xmlrpc.php
# http://[website]/blogs/xmlsrv/xmlrpc.php
# http://[website]/blog/xmlsrv/xmlrpc.php
# http://[website]/blogtest/xmlsrv/xmlrpc.php
# http://[website]/b2/xmlsrv/xmlrpc.php
# http://[website]/b2evo/xmlsrv/xmlrpc.php
# http://[website]/wordpress/xmlrpc.php
# http://[website]/phpgroupware/xmlrpc.php
…

Source : McAfee virus information library

How to customize Ubuntu and Knoppix GNU/Linux Live CD

Ubuntu LiveCD

If you are looking a way to produce your own demo cd, or your own cool GNU/Linux live CD, then your might find the guides listed below are useful for you

Ubuntu

How To Customize the New Ubuntu Live CD

Customizing Knoppix

Remastering Knoppix

You might find that a lot of customised Linux Live CD are based on these two distro. Notably, the GNOME 2.12 Live CD, UNDP/IOSN LiveCD and MyKnoppix

Happy customizing!

BitlBee – turn your IRC client into multiprotocol Instant Messenger client

biltbee logo at blog.mypapit.net

Check out BitlBee, IRC gateway that can turn your irc client into a multi-protocol Instant Messenger client!

The main motivation behind BiltBee is to enable console users to use a multi-protocol Instant Messenger client. Since irc clients is common in console environments, so BiltBee is implemented as a gateway server, so that a user can connect to their favorite IM networks as if connecting through an irc server.

BiltBee server is available under GNU/Linux and Microsoft Windows platform. It supports MSN, ICQ, Jabber, AIM, and Yahoo! IM networks.

You can connect to public Bitbee server through CGI interface at http://cgi.bitlbee.org if you don’t want to install BitlBee in your computer.

BitlBee Screenshot :

Oh, BitlBee is licensed in GNU General Public License.

  1. BitlBee website
  2. BitlBee public server

Testing out MyKnoppix 3.9


My Knoppix 3.9

Hey hey, I’ve just tried MyKnoppix 3.9 today. According to it’s website, it is a GNU/Linux Bootable CD remastered by Knoppix Linux 3.9 CD. This release comes with no developement or library files , it contains more multimedia related programs such as Kaffiene, Mplayer and more. My knoppix supports English, Traditional Chinese, Simplified Chinese and Malay/Indonesian.

The CD comes with the following Softwares:
* Kernel 2.6.11
* KDE 3.4.1
* Mplayer
* Kaffeine
* SKIM – Chinese Input Method
* DVD O Matic – Rip your DVD with ease
* DVD Wizard Authoring – Create your own DVD with ease
* Acid Rip
* KaudioCreator
* Open Office 2.0 Beta
* freenx –
* videolan
* kio_burn
* Mozilla firefox/thunderbird
* Support one click playing DVD, VCD and AudioCD

But one thing still makes me wonder,is that although MyKnoppix tried it best to be a “Digital Home Digital”, I still cant figure out how can I rip audio and DVD while i’m using LiveCD? I cant even play my DVD while the LiveCD is running in my computer…

My previous post about GeexBox does almost the same job as MyKnoppix minus CD/DVD ripping stuff but still GeexBox is loaded entirely in memory leaving cd/dvd tray free for playing/ripping stuff.

However, I praise Ang Tun Chek, for making this cd available to public as well as the effort to bring remastered version (with local language) to public. Hope that this is not the last time I see MyKnoppix around…

Links

  1. MyKnoppix Website
  2. Download myKnoppix Linux 3.9