[Gllug] Code Red worm sleeps?

Paul Nasrat pnasrat at uk.now.com
Wed Aug 1 17:06:03 UTC 2001


On Wed, Aug 01, 2001 at 05:35:28PM +0100, Richard Cohen wrote:

> The important point - I thought - about my idea, was to only use it
> responsibly, i.e. in response, not in attack.  You would run it as a handler
> on your system (a CGI script called default.ida, maybe?), which would
> response to attempted attacks by sanitising the attacker.  It would *not* be
> a propagating worm/virus.

A big enough buffer will kill it IIRC, check bugtraq archives.

Someone put the King James bible in I think (or Complete Shakespeare) as
default.ida.

Paul

-- 
"we apologise for any inconvenience" - God's Last Message to His Creation
Courtesy of Douglas Adams

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list