Security Incidents mailing list archives

UPDATED: Cisco Security Advisory: "Code Red" Worm - Customer Impact


From: Cisco Systems Product Security Incident Response Team <psirt () cisco com>
Date: Tue, 31 Jul 2001 16:00:00 -0400 (EDT)

-----BEGIN PGP SIGNED MESSAGE-----


UPDATED: Cisco Security Advisory: "Code Red" Worm - Customer Impact

The Cisco Security Advisory regarding customer impact from the "Code
Red" worm has been updated with new information.  It is available at
"http://www.cisco.com/warp/public/707/cisco-code-red-worm-pub.shtml";.

The document has been updated with newer information about the worm.  A
side-effect that can lead to a denial of service on the Cisco CSS 11000
Content Service Switches is described.  Older network management
products that originally shipped with IIS are listed in case they have
been reconfigured such that they are vulnerable and are still in use.

The changes were not determined to be large enough to justify mailing
out the entire advisory.  If you are unable to view the advisory on the
web, please request a text copy directly from the PSIRT team.

Address any comments or questions to "psirt () cisco com".  All published
Cisco Security Advisories are found at "http://www.cisco.com/go/psirt/";.

Thanks.

        Jim

==
Jim Duncan, Product Security Incident Manager, Cisco Systems, Inc.
<http://www.cisco.com/warp/public/707/sec_incident_response.shtml>
E-mail: <jnduncan () cisco com>  Phone(Direct/FAX): +1 919 392 6209


-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2

iQEVAwUBO2dNLWiN3BRdFxkbAQFVCggAmii/lpWtYOGH921/7+GcRzHwdEtzSG7G
YtTwhRH23Gdgjp4YU1wgkUDa3nrcLREmKiXurpyepd7rQ8TKIYGzBAt1MXRnUKWB
aO6kh6827eUNqvers/tBndSkPatALXJ2eUloaFdoEmTxkAPpLIRip5dv9fxpaLL+
u+btLGublIkL2Tv1gG6frNMw8xeHRzKuqC/O6rkLKLZCdLqph3ByqFIgkB2ffd2g
+43mVcg7F4HpNdPOnXsHIs1ZG9JNSA1HWkqkwN+9coQzSVQlQtsNAMtCxGKV9FVQ
YkQYdtqck67CuFF+eyqs5J21XRyV26IVjuOGbwTDSUqnvSaMmsvzzA==
=BN1T
-----END PGP SIGNATURE-----

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: