TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
I agree. Here in my location we have applied the patch several times and the
synfloods continue i.e one of our webservers continues to probel and send
outbound on port 80. Has anybody else seen anything. No new news has been
published my MSFT, eEYE, incident.org and I can't find anything from
X-Force(ISS).
Gary Flynn <[EMAIL PROTECTED]> on 07/19/2001 04:11:35 PM
To: [EMAIL PROTECTED]
cc: (bcc: Franklin I. Hagler)
Subject: Just a heads up on the ISAPI idq.dll test
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
It hasn't worked here. I've had to patch two
systems that the scanner told me were fine.
In fact, I ran the single test across several
thousand machines and it told me all were fine...
something I just knew couldn't be right.
So if you're using it to find machines susceptible
to the Red Code worm, I don't think you're getting
accurate data.
IisIsapiIdqBo under NT Patches for MS01-033
--
Gary Flynn
Security Engineer - Technical Services
James Madison University
Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/info-security/engineering/runsafe.shtml
