RE: SANS Security Alert. Code Red Is Set to Come Storming Back!

[InfoSec News <isn () c4i org>]

Forwarded by: Kevin Doyle <kdoyle () psecu com>

I for one cannot believe the publicity this thing is getting.  I can't
tell you how many people who have home personal computers (not servers
running NT or IIS) have come up to me and said things like they would
be shutting down their computer for days or asking if they should
apply the patch.  The hype has been not only overblown, but
misleading.  We need to be careful or we as a profession will be
getting the "cry wolf" reputation.

Kevin Doyle
Information Security Manager
PSECU
kdoyle () psecu com
phone 1.800.237.7328 ext 2608
fax 717.720.1143
html:  www.psecu.com


-----Original Message-----
From: InfoSec News [mailto:isn () c4i org]
Sent: Wednesday, August 01, 2001 5:50 AM
To: isn () attrition org
Subject: RE: [ISN] SANS Security Alert. Code Red Is Set to Come Storming
Back! 


Forwarded by: Marc Maiffret <marc () eeye com>


Good thing they all waited until it was to late. :-]

Signed,
Marc Maiffret
Chief Hacking Officer
eEye Digital Security
T.949.349.9062
F.949.349.9538
http://eEye.com/Retina - Network Security Scanner
http://eEye.com/Iris - Network Traffic Analyzer
http://eEye.com/SecureIIS - Web Application Firewall

| -----Original Message-----
| From: owner-isn () attrition org [mailto:owner-isn () attrition org]On Behalf
| Of InfoSec News
| Sent: Tuesday, July 31, 2001 12:35 AM
| To: isn () attrition org
| Subject: [ISN] SANS Security Alert. Code Red Is Set to Come Storming
| Back! 
| 
| 
| The is probably the first time Microsoft, The National Infrastructure
| Protection Center, Federal Computer Incident Response Center
| (FedCIRC), Information Technology Association of America (ITAA), CERT
| Coordination Center, SANS Institute, Internet Security Systems, &
| Internet Security Alliance have jointly agreed on anything. :)
| 
| - WK
| 
| 
| 
| ---------- Forwarded message ----------
| Date: Sun, 29 Jul 2001 19:21:31 -0600 (MDT)
| From: The SANS Institute <sans () sans org>
| To: William Knowles 
| Subject: SANS Security Alert. Code Red Is Set to Come Storming Back!
| 
| -----BEGIN PGP SIGNED MESSAGE-----
| Hash: SHA1
| 
| 
| SANS Security Alert. Code Red Is Set to Come Storming Back!
| 
| SANS, Microsoft, the NIPC, CERT/CC and four other leading security
| organizations released the following alert today (Sunday, January 29)
| at 4 pm. EDT.
| 
| 
| A Very Real and Present Threat to the Internet:  July 31 Deadline
| For Action
| 
| Summary: The Code Red Worm and mutations of the worm pose a continued
| and serious threat to Internet users.  Immediate action is required
| to combat this threat. Users who have deployed software that is
| vulnerable to the worm (Microsoft IIS Versions 4.0 and 5.0) must
| install, if they have not done so already, a vital security patch.

-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo () attrition org with 'unsubscribe isn' in the BODY
of the mail.