Code red variation sends Os instead of Ns - seems to be running at a higher rate

[Fred Cohen <fc () all net>]

Has anyone seen the variaiton on Code Red that rund with Os instead of
Ns for the buffer overrun? On a single IP address I have been getting
more than one per 10 minutes - on another IP I am getting ine every 2
minutes - all from differnt IP addresses...

FC
--This communication is confidential to the parties it is intended to serve--
Fred Cohen              Fred Cohen & Associates.........tel/fax:925-454-0171
fc () all net           The University of New Haven.....http://www.unhca.com/
http://all.net/         Sandia National Laboratories....tel:925-294-2087

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com