WIN2000 and IIS

From: Margaret CTR Rhodes (Margaret.CTR.Rhodesat_private)
Date: Mon Aug 27 2001 - 10:35:32 PDT

  • Next message: Paul Szabo: "Re: Solaris Patchadd symlink exploit."

    This may be a subject answered in the past, but I haven't seen anything on it
    lately.  
    
    Yesterday, our systems administrator, Mike Miller of RS Information Systems,
    loaded Win2000 on a server and deselected IIS.  Despite this, IIS loaded anyway
    with no notification that the deselection had been ignored.  He tried this a
    couple of times and our Incident Response team is testing it now.  The only way
    he knew that it loaded was that he went in and checked the list of services--and
    there it was!     
    Is there any information out there about this on any version of W2K?
    
    There were several people out there that may not have put the patch on because
    they deselected IIS--and then were hit with Code Red.  
    
    Here is the configuration of the machine.
    
    It's a Gateway E-5200
    Processor - Pentium III 600 MHZ
    Memory - 256 MB
    Adaptec 29160 Controller
    Hard Drive - IBM DMVS 18.2 GB
    Nic - 3C905c
    Win2000 Basic
    
    Maggie Rhodes
    ISS Analyst
    RS Information Systems
    



    This archive was generated by hypermail 2b30 : Mon Aug 27 2001 - 14:23:20 PDT