y2blog » ”phpThumb.php”の脆弱性を突いた攻撃が増加中

12

28

2011

”phpThumb.php”の脆弱性を突いた攻撃が増加中

phpThumb.phpの脆弱性を狙った攻撃が再発しているようです


今年の8月上旬にphpThumb.phpの脆弱性を狙った攻撃が爆発的に増えましたが、最近またphpThumb.phpの脆弱性を狙った攻撃が増えてきているようです.


HTTPのアクセスログを見ると、phpThumb.phpが置かれていそうなディレクトリを虱潰しに探っています.Wordpressのプラグインやテーマだけではなく、他のWebアプリケーションでもこのphpThumb.phpは多用されているようですので、Webサイトの管理者は年末休暇に入る前に今一度自サイトでphpThumb.phpが使われていないかチェックすることをお薦めします.


phpThumb.phpの脆弱性を狙った攻撃に関してはIBMの”Tokyo SOC Report” などのセキュリティー情報ページにアクセスすると良いでしょう.


Plone CMS および phpThumb への攻撃増加を確認 (IBM Tokyo SOC レポート)
尚、phpThumb.phpの最新版 1.7.11-201108081537 (released Aug 08, 2011) では今回の攻撃の影響は受けないようです.



...
[client 87.98.219.50] File does not exist: /wp-content/themes/comfy-plus/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /js/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /mambots/editors/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /admin/scripts/tinymce/jscripts/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /modules/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /lib/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /manager/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /thumb/phpThumb.php
[client 87.98.219.50] File does not exist: /global/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_hotornot2/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_hotornot2/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /wp-content/themes/max/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /wp-content/themes/redcarpet/scripts/phpthumb/phpthumb.php
[client 87.98.219.50] File does not exist: /staticfiles/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /content/phpthumb/phpthumb.php
[client 87.98.219.50] File does not exist: /class/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /admin/phpThumb/phpThumb.php
[client 87.98.219.50] script not found or unable to stat: /phpThumb.php
[client 87.98.219.50] File does not exist: /admin/upload/phpThumb.php
[client 87.98.219.50] File does not exist: /assets/components/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_alphacontent/assets/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_hotornot2/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_alphauserpoints/assets/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /admin/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /zadmin/tiny_mce/plugins/ibrowser/scripts/phpThumb/phpThumb.php
[client 87.98.219.50] File does not exist: /wp-content/plugins/com-resize/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /components/com_flexicontent/librairies/phpthumb/phpThumb.php
[client 87.98.219.50] File does not exist: /wp-content/themes/comfy-plus/scripts/phpThumb/phpThumb.php
...

Calendar

January 2022
S M T W T F S
 1
2345678
9101112131415
16171819202122
23242526272829
3031  
  • Blogroll

  • Meta