12
28
2011
”phpThumb.php”の脆弱性を突いた攻撃が増加中
phpThumb.phpの脆弱性を狙った攻撃が再発しているようです
今年の8月上旬にphpThumb.phpの脆弱性を狙った攻撃が爆発的に増えましたが、最近またphpThumb.phpの脆弱性を狙った攻撃が増えてきているようです．
HTTPのアクセスログを見ると、phpThumb.phpが置かれていそうなディレクトリを虱潰しに探っています．Wordpressのプラグインやテーマだけではなく、他のWebアプリケーションでもこのphpThumb.phpは多用されているようですので、Webサイトの管理者は年末休暇に入る前に今一度自サイトでphpThumb.phpが使われていないかチェックすることをお薦めします．
phpThumb.phpの脆弱性を狙った攻撃に関してはIBMの”Tokyo SOC Report” などのセキュリティー情報ページにアクセスすると良いでしょう．
Plone CMS および phpThumb への攻撃増加を確認 (IBM Tokyo SOC レポート）
尚、phpThumb.phpの最新版 1.7.11-201108081537 (released Aug 08, 2011) では今回の攻撃の影響は受けないようです．
...
[client 87.98.219.50] File does not exist: /wp-content/themes/comfy-plus/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /js/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /mambots/editors/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /admin/scripts/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /modules/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /lib/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /manager/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /thumb/phpThumb.php
[client 87.98.219.50] File does not exist: /global/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_hotornot2/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_hotornot2/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /wp-content/themes/max/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /wp-content/themes/redcarpet/scripts/phpthumb/phpthumb.php
[client 87.98.219.50] File does not exist: /staticfiles/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /content/phpthumb/phpthumb.php
[client 87.98.219.50] File does not exist: /class/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /admin/phpThumb/phpThumb.php
[client 87.98.219.50] script not found or unable to stat: /phpThumb.php
[client 87.98.219.50] File does not exist: /admin/upload/phpThumb.php
[client 87.98.219.50] File does not exist: /assets/components/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_alphacontent/assets/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_hotornot2/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_alphauserpoints/assets/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /admin/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /zadmin/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /wp-content/plugins/com-resize/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_flexicontent/librairies/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /wp-content/themes/comfy-plus/scripts/phpThumb/phpThumb.php
...
