CodeRed II Mutants

From: John Davidson (jwd_odsat_private)
Date: Wed Aug 08 2001 - 14:11:09 PDT

Next message: ghandiat_private: "Re: Code Red(s) being confused with sadmind/IIS worm?"

Previous message: Anderson Johnston: "Re: [unisog] Code Red(s) being confused with sadmind/IIS worm?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

My iis5.0 (patched) logs show the length of the original CodeRed II worm as
3818.

In the last hour 1600 EDT 08 Aug 2001 I now show 2 different mutants with
lengths of 3868 and 3899. The initiating code remains identical to original
CodeRed II Worm.

John Davidson
Objective Design Solutions

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: ghandiat_private: "Re: Code Red(s) being confused with sadmind/IIS worm?"
Previous message: Anderson Johnston: "Re: [unisog] Code Red(s) being confused with sadmind/IIS worm?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Aug 10 2001 - 07:25:20 PDT