Code red variation sends Os instead of Ns - seems to be running at a higher rate

From: Fred Cohen (fcat_private)
Date: Sat Aug 04 2001 - 19:20:19 PDT

Next message: Alfred Huger: "Code Red Revision"

Previous message: Wayne Conrad: "CRV3"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Has anyone seen the variaiton on Code Red that rund with Os instead of
Ns for the buffer overrun? On a single IP address I have been getting
more than one per 10 minutes - on another IP I am getting ine every 2
minutes - all from differnt IP addresses...

FC
--This communication is confidential to the parties it is intended to serve--
Fred Cohen		Fred Cohen & Associates.........tel/fax:925-454-0171
fcat_private		The University of New Haven.....http://www.unhca.com/
http://all.net/		Sandia National Laboratories....tel:925-294-2087

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Alfred Huger: "Code Red Revision"
Previous message: Wayne Conrad: "CRV3"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Aug 04 2001 - 20:02:57 PDT