[svlug] Umm... Incoming.

[George Bonser]

WARNING: Long URL, your/my MUA might wrap/break it:

http://securityfocus.com/frames/?content=/templates/archive.pike%3Fend%3D2001-08-11%26list%3D75%26mid%3D201877%26start%3D2001-08-05%26fromthread%3D0%26threads%3D0%26

Analysis of the new worm.

This one is kinda scary. Gives full access to the machine to anyone on 
the Internet with a web browser.


On Sun, 5 Aug 2001, Dagmar d'Surreal wrote:

> 
> Looks like some happy soul loosed another Code Red variant.  This one may
> have more tricks up it's sleeve than the previous version because well,
> there were only about 34 incidents a day on my home network on the 1st
> through the 3rd... and then 241 for August 4th involving a reasonably
> proportional number of unique hosts, and at the moment the rate
> is still increasing.  Check your Apache logs for the string "default.ida",
> coming in with (of course) no Vhost information.  The 10 o'clock news
> tonight should be interesting.
> 
> 
> _______________________________________________
> svlug mailing list
> svlug at lists.svlug.org
> http://lists.svlug.org/lists/listinfo/svlug
>