A new Linux worm is crawling the web looking for a large number of vulnerable PHP systems and applications. The worm, known as Linux.Plupii (Symantec) or Linux/Lupper.worm (McAfee), is rated as a Category 2 worm by Symantec, while McAfee considers the risk “low.” The worm installs a Trojan using wget and the attack allows for arbitrary code execution under the privileges of the web server user.

Source: Security Focus