Re: CodeRed Activity

From: Ryan Russell (ryan@securityfocus.com)
Date: 08/01/01 

Date: Wed, 1 Aug 2001 11:30:16 -0600 (MDT)
From: Ryan Russell <ryan@securityfocus.com>
To: Stuart Staniford <stuart@silicondefense.com>
Subject: Re: CodeRed Activity
Message-ID: <Pine.GSO.4.30.0108011129100.26441-100000@mail>

On Wed, 1 Aug 2001, Stuart Staniford wrote:

> Assuming it's the CRv2 code again,

I've caught 4 copies so far. All CRv2.

> that suggests that there are roughly 45% as
> many vulnerable hosts as there were last time. It's going to be as fully
> saturated as it gets early this afternoon.

We didn't reach saturation point last time, we hit the mode switch.

                                                Ryan

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com