[unisog] ida worm (Code Red)

Anderson Johnston andy at umbc.edu
Fri Jul 20 00:29:35 GMT 2001


This is probably a good time to update scans of port 80 on our networks.
Nmap or some other package that does OS fingerprinting will help address
the problem mentioned below.

					- andy

On Thu, 19 Jul 2001, Harris, Michael C. wrote:

> you may be overlooking the effect of the code red worm on other devices with
> port 80 active.
>
> We have seen HP jet print servers print a page of the exploit targeted at
> port 80 data for each of 600 hosts that have tried to infect each hp
> printer. I have also heard of some issues with some Cisco equipment,
>

------------------------------------------------------------------------------
** Andy Johnston (andy at umbc.edu)          *            pager: 410-678-8949  **
** Distributed Systems Manager            * PGP key:(afj2000) 1024/F67035E1 **
** Office of Information Technology, UMBC *        5D 44 1E 2E A6 7C 91 7A  **
** 410-455-2583 (v)/410-455-1065 (f)      *        C4 66 5F D5 BA B9 F6 58  **
------------------------------------------------------------------------------



More information about the unisog mailing list