[Gllug] Code Red worm sleeps?

[will]

----- Original Message -----
From: "Paul Nasrat" <pnasrat at uk.now.com>
To: <gllug at linux.co.uk>
Sent: Wednesday, August 01, 2001 6:06 PM
Subject: Re: [Gllug] Code Red worm sleeps?


> On Wed, Aug 01, 2001 at 05:35:28PM +0100, Richard Cohen wrote:
>
> > The important point - I thought - about my idea, was to only use it
> > responsibly, i.e. in response, not in attack.  You would run it as a
handler
> > on your system (a CGI script called default.ida, maybe?), which would
> > response to attempted attacks by sanitising the attacker.  It would
*not* be
> > a propagating worm/virus.
>
> A big enough buffer will kill it IIRC, check bugtraq archives.
>
> Someone put the King James bible in I think (or Complete Shakespeare) as
> default.ida.

So is what you are saying that just having a really big file called
default.ida will knobble the worm?  How?  What does that do?

will.


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug