Re: Please tell me I'm wrong: microsoft.com infected

From: Johannes Verelst (johannesat_private)
Date: Wed Sep 19 2001 - 15:49:50 PDT

  • Next message: Dave Hart: "RE: Please tell me I'm wrong: microsoft.com infected"

    > Rodrigo Goya <lucentat_private> wrote:
    >
    > I'd guess that the complex "physical" arrangement of such a large
    > site, and perhaps update mirroring lags, means that not all servers
    > have received their "updates" including that file yet.  (Also, they
    > may have AV software or other measures preventing the EML files from
    > getting on the servers, but be worried about the overhead of having
    > the on-access scanners parsing their HTML files each time they are
    > served...
    
    At the moment, all 4 servers in the microsoft.com round-robin DNS appear
    to not be vulnerable anymore: the extra HTML disappeared from the page.
    
    Johannes
    -- 
    Unix is simple. It just takes a genius to understand its simplicity
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Wed Sep 19 2001 - 16:01:28 PDT