nanog mailing list archives
RE: Code Red 2 cleanup; reporting..
From: "Mark Radabaugh - Amplex" <mark () amplex net>
Date: Sun, 12 Aug 2001 12:56:56 -0400
Interestingly enough it seems Microsoft's patch creates a DOS against IIS servers that redirect requests: http://www.incidents.org/diary/diary.php#801 We were seeing IIS crash on a CodeRed patched NT box over the last few weeks. It turns out to be caused by the combination of CodeRed and Microsoft's patch. Changing the redirect behavior of the server seems to have fixed it. Given the way IIS crashes I wouldn't be too surprised to find out that there is another buffer overrun somewhere in either the patch or the redirect code. Mark Radabaugh Amplex (419) 833-3635
Current thread:
- RE: Code Red 2 cleanup; reporting.., (continued)
- RE: Code Red 2 cleanup; reporting.. up (Aug 10)
- RE: Code Red 2 cleanup; reporting.. Roeland Meyer (Aug 10)
- RE: Code Red 2 cleanup; reporting.. up (Aug 10)
- RE: Code Red 2 cleanup; reporting.. Tim Devries (Aug 10)
- RE: Code Red 2 cleanup; reporting.. Roeland Meyer (Aug 10)
- Re: Code Red 2 cleanup; reporting.. Eric A. Hall (Aug 10)
- Re: Code Red 2 cleanup; reporting.. Jon Allen Boone (Aug 11)
- Re: Code Red 2 cleanup; reporting.. Eric A. Hall (Aug 10)
- Re: Code Red 2 cleanup; reporting.. Steven M. Bellovin (Aug 10)
- Re: Code Red 2 cleanup; reporting.. Rafi Sadowsky (Aug 14)
- RE: Code Red 2 cleanup; reporting.. Roeland Meyer (Aug 12)
- RE: Code Red 2 cleanup; reporting.. Mark Radabaugh - Amplex (Aug 12)