Hi All,

   It has come to our attention that there are, apparently, some script kiddies out there that are randomly looking for some PHP applications with remotely exploitable vulnerabilities.  The scan looks for 3 different PHP application.  They are (with CVE references):

• Cacti 0.8.6i and earlier http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6799
• MyNews 4.2.2 and earlier http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0633
• Valarsoft WebMatic 2.6 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0839

  If you are not running PHP or are not running these PHP applications, you don't have anything to worry about.  If you are, please patch ASAP. 

---

James Sawyer
-----------------------------------------
Dev Lead
Ultima Support Team