RE: CodeRed Observations. ##

From: root (rootat_private)
Date: Mon Mar 17 2003 - 20:14:06 PST

  • Next message: root: "RE: CodeRed Observations. ## Christine_Kronbergat_private" 

    Subject: RE: CodeRed Observations.
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Fri, 14 Mar 2003 13:52:40 -0500
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
Message-ID: <D49508FE6BCE104A8D152CC97D4E2F0E6963FDat_private>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: CodeRed Observations.
Thread-Index: AcLqWuPHlTcxQEoxTAGjH0dy9wj9lQ==
From: "King, Brian" <BKingat_private>
To: <incidentsat_private>

Heres the article that I read about IIS and IE interactions:
http://grotto11.com/blog/slash.html?+1039831658 . Besides quicker
propagation, not using a handshake would allow spoofed IPs so that it
would be harder to track down and fix.
Brian

----------------------------------------------------------------------------

<Pre>Lose another weekend managing your IDS?
Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre>
<A href=3D"http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A>


.

----------------------------------------------------------------------------

<Pre>Lose another weekend managing your IDS?
Take back your personal time.
15-day free trial of StillSecure Border Guard.</Pre>
<A href="http://www.securityfocus.com/stillsecure"> http://www.securityfocus.com/stillsecure </A>

    This archive was generated by hypermail 2b30 : Tue Mar 18 2003 - 11:34:23 PST