Snort mailing list archives

RE: Code Green???


From: John Steniger <stenigej () FamilyMeds com>
Date: Tue, 18 Sep 2001 13:06:21 -0400

This isn't a code red exploit, it appears to be a IIS-Unicode exploit.  Our
servers are patched for Code-Red as well as IIS Unicode and other then some
degraded performance, we aren't seeing any infections.  

John J. Steniger

-----Original Message-----
From: Steve Halligan [mailto:agent33 () geeksquad com]
Sent: Tuesday, September 18, 2001 12:35 PM
To: 'richard'; snort-users () lists sourceforge net
Subject: RE: [Snort-users] Code Green???


This infected our previously patched for code red, winnt and win2k
systems.. One of them i even fixed yesterday and put Microsofts 
CodeRedCleanup tool on it. It is placing the root.exe file 
on the hard
drive. 

Can anyone verify that this is infecting IIS server patched to current
levels? 

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: