Snort mailing list archives

RE: Code Red attacks


From: Gordon Ewasiuk <gewasiuk () gnmc net>
Date: Mon, 17 Sep 2001 07:55:15 -0400 (EDT)

On Today, Jason Withrow wrote:
What bother with the email.

Since CR installs a CMD Shell that is freely accessable,
Write a script that write a text file to that users computer.

- Jason

Yo Jason,

I agree.  Code Red isn't worth the time or the bother.  Just putting out
links and info that others shared on other mailing lists.  =P

As for sending data to the infected CR server, that raises legal
questions.

-Gordon

--------------------------------------------------
Gordon Ewasiuk, Certifed Sun Fanatic,  Winstar VHC
The REAL office number is here----->  703.893.4901
Tired of BSODs, My Computer, and Code Red?
http://www.sun.com/solaris/binaries/
-------------------------------------------------


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: