Re: CodeRed Activity

[Ryan Russell <ryan () securityfocus com>]

On Wed, 1 Aug 2001, Stuart Staniford wrote:

> Assuming it's the CRv2 code again,

I've caught 4 copies so far.  All CRv2.

> that suggests that there are roughly 45% as
> many vulnerable hosts as there were last time.  It's going to be as fully
> saturated as it gets early this afternoon.

We didn't reach saturation point last time, we hit the mode switch.

                                                Ryan


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com