Re: Reinfection phase Re: possible?

From: Kris Kennaway (kris@obsecurity.org)
Date: 07/22/01


Date: Sat, 21 Jul 2001 15:35:51 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: "Jon O ." <jono@microshaft.org>


On Sat, Jul 21, 2001 at 02:54:17PM -0700, Jon O . wrote:
>
> I justed wanted to make sure everyone was aware that Code Red is supposed
> to restart its infection phase on 8.01.01.
>
> www.eeye.com has a good write up on this and the rest of the worm.
>
> Watch out for their scanner tool though, it's a windows binary and there
> is no source...

This is off-topic for freebsd-security, thanks.

Kris



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Relevant Pages

  • Reinfection phase Re: possible?
    ... to restart its infection phase on 8.01.01. ... > okay, today i checked my apache logs this is what i got: ...
    (FreeBSD-Security)
  • Re: Reinfection phase Re: possible?
    ... On Sat, 21 Jul 2001, Jon O. ... > to restart its infection phase on 8.01.01. ... PsyV ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • More bind8 ports problems
    ... server doesn't restart, as it is looking for named.conf in ... user, but if I restart it with ndc, the new named runs as "root". ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)