Linux Worm Targeting Hidden Devices
The Symantec blog has a report
of a new Linux worm capable of attacking a range of small,
Internet-enabled devices in addition to traditional computers. "The
worm, Linux.Darlloz, exploits a PHP vulnerability to propagate itself
in the wild. The worm utilizes the PHP 'php-cgi' Information Disclosure
Vulnerability (CVE-2012-1823), which is an old vulnerability that was
patched in May 2012. The attacker recently created the worm based on the
Proof of Concept (PoC) code released in late Oct 2013."