1. /
  2. Security Response/
  3. Perl.Raumoni

Perl.Raumoni

Risk Level 1: Very Low

Discovered:
July 14, 2006
Updated:
February 13, 2007 12:57:41 PM
Type:
Worm
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


Perl.Raumoni is a worm written in Perl script that attempts to spread by exploiting certain vulnerabilities on Web servers running Joomla or Mambo CMS packages. It has been reported that there are two versions of Perl.Raumoni, which exploit either the "mosConfig_absolute_path" Remote File Inclusion Vulnerability or the SimpleBoard SBP Parameter Multiple Remote File Include Vulnerabilities (BID 18917).

Antivirus Protection Dates

  • Initial Rapid Release version July 14, 2006
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version July 14, 2006
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date July 19, 2006
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: Low
Writeup By: Kaoru Hayashi

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver