Should I be concerned about the Linux.Darlloz worm?

If you don't have PHP-cgi installed or if you upgrade it recently. Nothing.

Linux.Darlloz is a worm that spreads to vulnerable systems by exploiting the PHP 'php-cgi'.

Ubuntu already release fixes to prevent spread more than a year ago:

  • http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-1823.html
  • http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-2311.html
  • http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-2335.html
  • http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-2336.html