Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 21 Jul 2001 14:04:47 -0700
From:      Enkhyl <enkhyl@pobox.com>
To:        nathan@salvation.unixgeeks.com
Cc:        freebsd-security@freebsd.org
Subject:   Re: possible?
Message-ID:  <20010721140447.X89481@cassie.foobarbaz.net>
In-Reply-To: <20010721204942.12010.qmail@salvation.unixgeeks.com>; from nathan@salvation.unixgeeks.com on Sat, Jul 21, 2001 at 08:49:42PM -0000
References:  <20010721204942.12010.qmail@salvation.unixgeeks.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Jul 21, 2001 at 08:49:42PM -0000, nathan@salvation.unixgeeks.com wrote:

[snip]
> this same exact get request came from several different address as well. such
> as: 128.138.105.172, 202.157.154.126, and a couple of others. any ideas? any
> remote exploits in apache i've missed? i'm running Apache/1.3.19 Server..

This is from the Code Red worm. Take a look at the
threads on Bugtraq and/or Nanog lists.

-- 
Christopher Nielsen - Metal-wielding pyro techie
cnielsen@pobox.com
"Any technology indistinguishable from magic is 
insufficiently advanced." --unknown

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010721140447.X89481>