Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 04 Aug 2001 12:42:16 -0500
From:      Jon Loeliger <jdl@jdl.com>
To:        Fernando Gleiser <fgleiser@cactus.fi.uba.ar>
Cc:        questions@FreeBSD.ORG
Subject:   Re: Attempted Buffer Overrun in via httpd? 
Message-ID:  <E15T5RI-000B0V-00@jdl.com>
In-Reply-To: Your message of "Sat, 04 Aug 2001 14:27:37 -0300." <20010804142321.X91592-100000@cactus.fi.uba.ar> 

next in thread | previous in thread | raw e-mail | index | archive | help
So, like Fernando Gleiser was saying to me just the other day:
> 
> It smells like code red. It is a worm which tries to exploit a vulnerability
> in M$ IIS.

Ah!  Duh.  Wait, I'm catching up here...  What's the current virus
knocking on everyone's door?  Oh yeah, _I_ remember now!  Code Red.

> Apache (AFAIK) is not vulnerable.

Excellent.

> The request comes from an infected machine, maybe you want to inform the
> webmaster about this.

Heh.  If I were to do that, I'd do _nothing_ else!  I have hundreds
of them, and they are mostly from various dial-up looking DNS names.

Ugh.


Thanks for the info!,
jdl

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E15T5RI-000B0V-00>