Posts

Posted on

Unix worm that exploits vulnerable PHP/CGI scripts

Please secure and patch your PHP scripts, especially the one that uses xml-rpc protocol. The Linux/Lupper.worm (a variant of BSD/Scalper) might infect your system.

This worm spreads by exploiting specific PHP/CGI script vulnerabilities that could be hosted on the following URLs:

….
# http://[website]/stats/
# http://[website]/xmlrpc.php
# http://[website]/xmlrpc/xmlrpc.php
# http://[website]/xmlsrv/xmlrpc.php
# http://[website]/blog/xmlrpc.php
# http://[website]/drupal/xmlrpc.php
# http://[website]/community/xmlrpc.php
# http://[website]/blogs/xmlrpc.php
# http://[website]/blogs/xmlsrv/xmlrpc.php
# http://[website]/blog/xmlsrv/xmlrpc.php
# http://[website]/blogtest/xmlsrv/xmlrpc.php
# http://[website]/b2/xmlsrv/xmlrpc.php
# http://[website]/b2evo/xmlsrv/xmlrpc.php
# http://[website]/wordpress/xmlrpc.php
# http://[website]/phpgroupware/xmlrpc.php
…

Source : McAfee virus information library

Posted on

How to customize Ubuntu and Knoppix GNU/Linux Live CD

Ubuntu LiveCD

If you are looking a way to produce your own demo cd, or your own cool GNU/Linux live CD, then your might find the guides listed below are useful for you

Ubuntu

How To Customize the New Ubuntu Live CD

Customizing Knoppix

Remastering Knoppix

You might find that a lot of customised Linux Live CD are based on these two distro. Notably, the GNOME 2.12 Live CD, UNDP/IOSN LiveCD and MyKnoppix

Happy customizing!

Posted on

Spammers got creative with names

I’ve opened my e-mail today, just to be greeted by somebody named Mr. Sulu, or to be exact, Dr Borneo Sulu (check out the name). Plus, this particular Mr Sulu is not a navigator in the starship Enterprise, but instead an auditor from Ministry of Finance from Malaysia(!).

here’s the excerpt of the email

I am Dr.Borneo Sulu an auditor with the Contract Evaluation Unit,Ministry Of Finance .Last year November one Mr.Raheem Praveen from India executed contract through
the Ministry of Aviation here in Malaysia, the contract is worth [$8,250,000.00]

Ministry of Aviation? hmm.. I’d say,
Take us outta here Mr Sulu, ahead warp factor 9

Sulu in USS Enterprise

p/s: Spammers are everywhere, they tried every creative way to create and backed their story up. I wonder if any of malaysian fall for them?

Posted on

solat.xml – get prayers time in xml format

Surfed the internet today and I found an interesting project, the solat.xml from http://zaim.abrahman.com/labs/. According to the website, solat.xml is a web service API that uses REST based protocol.

Basically, to use solat.xml service, you just have provide your location, month and year, and the service will return you the list of prayers time in xml format, as defined in the above-mentioned website.

Currently the service only supports prayers time within malaysia, using data generated from http://www.al-azim.com/falak/, an astronomy association from Melaka.

I think this is a useful service, because it could be easily integrated into any applications be it web-based or stand-alone. Please write to the author of solat.xml (abuzaim+solatxml@gmail.com) if you have any ideas or improvements for the project.

Posted on

Blastwave.org – Software repository for Solaris

I don’t know if any of you guys ever heard of blastwave.org, but it has the reputation of being the largest software repository for Solaris/Opensolaris operating system. Born out of a grassroots movement, blastwave repository started with an initial set about 50-100 packages. It is now has grown in popularity, complexity, offerings and expectation since its formation.

Sponsored by Sun Microsystem, Genesi and DTU, blastwave software repository now covers hundres of software packages for the Solaris and OpenSolaris operating system, making it the largest Free and Open Source software repository for Solaris.

So Solaris user, what are you waiting for? browse for http://blastwave.org

p/s: Blastwave software distribution is also available on dvd along with OpenSolaris code-base. You can order Blastwave DVD here if you are a Solaris fan.

Posted on

RSS 2.0 / Atom 1.0 for Coppermine 1.3.x plugin

Coppermine 1.3.x Plugin RSS 2.0

I’ve made some improvements over my previous Coppermine plugin.

I’ve added Atom 1.0 support and picture caption to the published feed. I’ve also altered the default feed to publish the latest 10 photos instead of 6.

Well, glad to have a plugin that can publish both RSS and Atom feed in Coppermine 1.3.x

old Download links :

  1. zip package
  2. tar.gz package

Download Coppermine RSS/ATOM plugin here:

  1. Mirror #1
  2. Mirror #2
  3. Mirror #3

*Note that this plugin worked under Coppermine 1.4.x also, but it is untested with PHP 5.x.