Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Sep 2001 20:47:10 +0300
From:      Giorgos Keramidas <charon@labs.gr>
To:        Rob Secombe <robseco@teksupport.net.au>
Cc:        freebsd-isp@FreeBSD.ORG
Subject:   Re: Code Red?!
Message-ID:  <20010920204710.B23424@hades.hell.gr>
In-Reply-To: <3.0.5.32.20010919104530.00795ca0@secombe>
References:  <OFFB70F3BC.75A1E6DC-ON86256ACB.0073FE26@kka.com> <OFFB70F3BC.75A1E6DC-ON86256ACB.0073FE26@kka.com> <3.0.5.32.20010919104530.00795ca0@secombe>

next in thread | previous in thread | raw e-mail | index | archive | help

--envbJBWh7q8WU6mo
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Rob Secombe <robseco@teksupport.net.au> wrote:
>=20
> These worms appear only to attack using the ip address of the server on
> port 80 and not using a name, so at this stage they are not hitting the
> virtual webs, ...

No, using smbclient to browse infected hosts that ``attacked'' my dialup
FreeBSD at home, I discovered nimda traces in virtual directories too.

- giorgos

--envbJBWh7q8WU6mo
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)

iD8DBQE7qiuenx3zGsay9fwRAks2AJ9iaTMnosdpSX6rLGmHfot38SxWiQCgzkLq
j9tBolgNa1RlUqe8yns6ZZE=
=eIDB
-----END PGP SIGNATURE-----

--envbJBWh7q8WU6mo--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010920204710.B23424>