XML_RPC_PHP Remote Execution Worm

Hmm! Today i noticed in my webserver logs that I got an increase in the XML_RPC_PHP Remote Execution vulnerability. After a little search (yes ofcourse little, it’s my job to know this and where to look, in this case on dshield.org), i found out that dshield.org reported a new worm that is making use of vulnerabilities within XML_RPC(Pear and PHP extension). 

What does that have to do with me? why do you write about it? Well basically, if my webserver gets hit by this, and dshield puts out an alert, then guess what you will be affected as well. You are vulnerable if you have a version of XML_RPC which is not up to date yet.

Dshield reports the following(http://isc.sans.org/diary.php?storyid=829):

19518 – phpAdsNew / phpPgAds < 2.0.6 Multiple Vulnerabilities
18600 – Serendipity XML-RPC for PHP Remote Code Injection Vulnerability
18601 – WordPress < 1.5.1.2 Multiple Vulnerabilities
18640 – Drupal XML-RPC for PHP Remote Code Injection Vulnerability
16189 – AWStats configdir parameter arbitrary cmd exec

are being slammed in the wild. As you can see these are all popular applications used on the world wide internet. To see what you can do about it, please read the VuXML pages of FreeBSD. They have a very well documented item about it and also give references to the solution, the actual problem and such. You can find it here: http://www.vuxml.org/freebsd/e65ad1bf-0d8b-11da-90d0-00304823c0d3.html

So do everybody a favor and patch yourself for this. Thanks!
 

(more…)

 

Karting Results and today

WOEHOE, was the first thing i said when i left the karttrack. You will get a very big load of energy if you are karting with high speed (well it feels like high speed) and you need to calm down a bit afterwards. How did it went? Well to be honest, the first heat was the only i lost in every possible way. People passed me a couple(!) of times, leaving me wondering why everyone could pass me while i was hitting the gas 100% all the time. With my weight (60kg) i was the one that should have had a lot of speed, though all my rounds were slow and i got a blue flag every possible way. So after 14 rounds(!) the marshalls gave me a red flag (why was the thing i asked at that moment). With all the adreline in my body it was difficult to get up, but in the meanwhile the marshall was jumping on my karttires, and why? Well the left rear tire was -dead-, i understood instantly why everybody could pass me so easily. I got a different kart and drove like a madman (well sortoff, i got used to the other kart and this one actually responded to the steering and gas peddle). I had 2 collisions with the new kart, causing my brother to slam into me 2 times! In the final lap i had my fastest one which was significantly faster then the previous rounds in total! So that was the first heat.

The second heat was an hour later because of an other party that was driving with 2 girls driving at 10km/hr. They could not even get up the track because of their slow speed. A bit sad because the driving was very bad for everyone (they slammed into eachother and hit the tires a LOT). Our second heat was at 23.00 and i got kart "30" which was different then the 2 karts i had before. I started at the 4th or 5th place and i flew over the track. I took all corners very sharp and i enjoyed much much more then the previous heat. Simply because i could go and pass people (and darn, they tried catching me as well). Though i didn’t loose my people in front of me, i drove near Rik and my brother for ages and when i made a steering error i lost them in the 4 meter series (They were at 10 meter at that moment). I finished 4th (out of 8) which was a major improvement. If you see my laptimes you will see the difference. First heat around 35seconds per round, secondheat 28seconds per round, which is a "slight" difference :-)

Perhaps we will do this again next month, after my bluespots and backpain ;-) is gone again (well it does not hurt that much but you feel it in the back, side and knee) .

Yesterday before i left my causine called me. "remko my msn is broken, can you help me please?" Well i tried from remote but it seemed that i was unable to. I asked her to give me a yell tommorrow (today) if the problem still occured. and ofcourse it still occured so i went to see them all. I fixed MSN (firewalling issue) and tried reparing the DVD drive which ejected the tray all the time. Sad because it was an hardware issue but well. I talked with my aunt for a little and we drunk a couple of coffee before i decided to head back home.

Now i am in my pyjama again (my throat hurts a bit) and i am watching Formula A1 (country racing). I will beat my PCTV Pro card first, because there seems to be an problem. The tv works great, but the sound is 4 seconds faster then the movie screen itself. It seems that i am unable to solve it (tried a couple of things already) so i am a bit annoyed by that since "CRASH" and when i look the car isn’t even crashed yet.. strange and such. Ah well, tonight some FreeBSD work and early to bed to get rid of the throat pain.

(more…)

 

Karting

Tonight i will go karting with my brother, father, Rik, some friends of my brother and ow yeah myself. Rik is taking along his girlfriend who will support him (he needs the support, because ofcourse i will get passed him and i will show him a couple of corners). Sadly everyone says that they will beat me and i tell everyone that i will beat them, so lets have a look at what happends tonight. This is the first time since a couple of years (last time i Karted was with my boss) and i hope that i am still able to drive hard and good :D .

More information tonight or tommorrow…

(more…)

 

Shopping with Denise and Luca

Ew, people that are reading the topic are thinking: Remko? Shopping? Huh? Did i miss something?

Well, i do not mind shopping actually; no really i do not mind! Denise asked whether it was a good idea to go shopping with her and Luca. Well? Eh Ofcourse! Denise needed some clothes and some new boots. She found some new clothes but the boots were a bit more difficult :) . I saw a LOT of boots, never saw that many boots :-) I was pretty amazed to see that the shop with that many boots did not have the right ones for her. Ah well, perhaps because when I see shoes that I need i just buy them :-) and not wonder around in a big shop. Though it was pretty interesting to see :-) . After that we went shopping for some clothes for Denise and Luca and I went to watch a movie (at the shop) and play around a bit. I have to admit that Luca was very lovely :-) .

After a while his mother came back and we went on walking around and shopping a bit. We ate a hot (stroopwafel) which was really nice :-) . So after a period of walking around, shopping around we decided to head back to home. Denise walked into a college-student and her boyfriend and she chatted a bit with them. Luca and i went to see some cars. We drove home (Which went better then i expected since it was during the most busy part of the day) and i enjoyed a cup of soup at Denise’s place.

So in short i had a great day and I enjoyed shopping with Denise and Luca :)

(more…)

 

Websites back up

Yesterday I upgraded to FreeBSD 6.0 (Which works like a charm, i think this is a real good release! You should try it :-) ). And after that i decided to upgrade php, which was a very stupid call. From experience it is known that upgrading packages quickly after the release means getting a lot of troubles on your head.

So ofcourse PHP broke down and disabled apache2+mod_rewrite functionality (which is used on this website and a lot of other sites that I host); causing all major sites to mallfunction. Really great to break your setup late in the evening after doing an rather big upgrade..

Be aware; do not insta-update your packages, you might get hurt :-)

(more…)

 

Honeynet mirror check script

As people might know, i have a mirror of the www.honeynet.org project at www.honeynet.nl. Recently Lance Spitzner and I reviewed some of the mirrors and since it takes a little time I thought it would be good if there is an automated script available.

Currently the script checks what the last modification time of the index file is (of the official server first) and then scans the other mirrors to see their last modification time. They should be the same after about an week (not sure how we can check that though).

And ofcourse since my script is BSD licensed; i attached it below (click on the read more link).

If you have suggestions on how to make the script better. Please let me know. I will also put this script in the download section and make a reference to an text file so that you can use it.

(more…)

 

Goodbye Tienervaders.org

So, finally, after a lot of consideration and thought i decided i should remove the vhosts for tienervaders.org (in the DNS server so that it’s really gone). Why? Well easy; the domain was unmaintained for a long period of time. The reason it was no longer maintained is that the project for me is over. I got what i wanted; support for Teenfathers within the Netherlands. Fiom and st. Donna now have groups that are able to help teenfathers. Please contact them if you need any help.

I understand that this might hurt some people that thought it was a light in their dark period. However i want to make clear that someone who is willing to build something usefull out of Tienervaders.org is free to do so (contact me please), but note that i will NOT deliver input nor spend much time on it. I can use my time better nowadays…

So far for Tienervaders.org, move on people, the show is over.
(more…)

 

Another week passed..

So quickly another week passed…

This week started on Sunday, I went to pickup Luca and Denise so that we could travel to the Zoo, were we supposed to meet up with my parents, brother and his girlfriend. Sadly Luca’s silicone tearthingy came out of his eye. It was very strange to see. But luckily Denise and I remained calm and were able to directly comfort Luca (Well actually Denise was) and I called our parents and the hospital that were traveling to that first. After waiting a bit there we finally were helped by the doctor. Sadly the tube could not be removed and it needed to be done the day after; since the tube was in a round they cut it in two parts and took it out as much as possible. Luca still had a little tube sticking out of his eye (which I found so sad for him, even though people told us that it would not hurt etc. I can imagine that you are not happy when you see a tube in front of your eyeball. We also asked whether we still were able to go to the zoo and the doctor said that it would be a great idea to do so. I have to mention that Denise was very strong at the moment and helped Luca very well… Yes I was also there and helped Luca as much as possible and also comforted him. But Denise did the first couple of moments which were most important…

So we went to the Zoo after that and had a great day; on my picture gallery there are photo’s about the Zoo. It was a really great day, seeing luca at the dolfinarium enjoying all the fishes and seeing him getting excited and such. He also loved the playground in which his big uncle "Tijn" and I helped Luca getting up and we got down with the three of us and later even with my mom :-) . All in all a very great day!

The next day i was free in the morning to support Luca, Denise, her mother to the hospital. After we waited for a few and it all took some "long" (yes i am impatient). Finally Luca needed a new diaper, the first "big" diaper i needed to change (yes yes you know what i mean :) ) and in the meantime we were called to the doctor; so Denise said that we would be there in a couple of minutes. The doctor would let someone else go first but seemed to forgotten us .. We waited for some more time and finally it was our turn. The doc repeated that the doctor the day before already said. So , you need to get back to us tommorrow and take out the tube with a little surgery.

The day after Denise, Luca and I returned to the hospital (Denise was brought by her dad) very early (0715) and Luca was helped. Sadly this also took very long , not because of the surgery or something else, no the darned doctor took a very long time to say that we were able to leave. This while luca already was playing for a long period of time, ate and drunk already. Sigh.. but Luca was alright and when we got home at his place he got a little present from all of us , which he seemed to enjoy very much :-) . After that i left and i heared that Luca got to bed pretty soon after that and played all night long so everything seemed fine again.

But now luca was alright but i was feeling sick. When i drove back home i drunk a bit of Extran and that seemed to fell wrong. I got ill during the night (i never have that!) and stayed at home the next couple of days.

Yesterday Luca called me and we had a nice little conversation; eventhough i could not understand him all the time; it made me feel really good to hear him (thanks denise!) 

Today i called my boss to tell that i am well again. Which is not perse true; but since i am free for a couple of days i expect to be better when i am back at work.

Went to my  granny to show the pictures of the Zoo. She really loved them :D and I watched some Andre H6 (Hazes); and we all sung a bit along!

So far for my updates..

(more…)

 

Friday at Luca

So after a week of not writing anything i will write somethign while listening to Blof – Bijna waar ik zijn moet (nice song).

Today it was Luca-Friday and I went to his house. When I arrived the cute guy was still asleep so i talked with his mom and we suddenly heared him calling "mama mama!". So instead of Mama going up, I went up and entered his room. When he saw me he said "hoi". So i took him from his bed and got a big hug :-) :-) . We walked downstairs and played a bit. His mother was arranging some clothes and I dressed Luca. He helped me undressing so it went very smoothly (it’s nice to see him able to helpout; which is a step for him and makes life easier for me :-) ). He even helped putting on his socks, so i have good hope that he will be able to do that all by himself in some time :) .

After that we played downstairs and i played that i was asleep. That was very nice since luca silently tried to awake me and we made fun ;-) i tickled him and then fell asleep again. He found that pretty funny :-) I also got a spontanous kiss at that moment. We played along and also played with some Duplo. He loves playing with that and toghether we build a nice tower with windows and such. My dad phoned whether i was able to pick him up and i was, i left Luca :( at 16.15 to capture my dad at Hoogvliet so we could drive home. At first Luca didn’t want to say goodbye, but then i got some kisses and his mother made him interested in waving from upstairs :-) So he went up and i went to my car. When i entered my car i could see him and his mother waving at me, Luca had a big smile which is so cute to see :-) .

All and all a very nice day, i really enjoyed it! Luca is so cute, and i love him with all my heart :-)

Not sure what i will be doing the rest of the evening and tommorrow; but sunday will be fun again :-) I will be going with D, Luca, my father, my mother, my brother and my brothers girlfriend to the zoo. Let’s see if we can see some remko’s (monkeys) :-)

(more…)

 

FreeBSD category Weblog

Actually this is a test log to see whether the FreeBSD category i created for my Weblog is working out. That way i can easily filter out FreeBSD specific logs.

(more…)

 
© 2003-2010 Evilcoder.org
Bear