Bugtraq mailing list archives

Re: "Code Red" worm - there MUST be at least two versions.

From: Adam <element () Dim com>
Date: Fri, 20 Jul 2001 15:48:08 -0700 (Mountain Standard Time)

Nope. Different worm altogether.

      I wonder if I have seen this variant - a person I emailed has a
server whose web pages served looks a lot like the Code Red worm's output
(1 line of simple html) displaying

      FUCK CHINA GOVERNENT
      and p0isonb0x (or something like that)


"fuck USA Government" 
"fuck PoizonBOx ">

Sadmind worm a few months ago...but they all look the same.

http://www.cert.org/advisories/CA-2001-11.html

Current thread:

"Code Red" worm - there MUST be at least two versions. Chris Paget (Jul 20)
- Re: "Code Red" worm - there MUST be at least two versions. Ethan Butterfield (Jul 20)
- Re: "Code Red" worm - there MUST be at least two versions. Don Papp (Jul 20)
  - Re: "Code Red" worm - there MUST be at least two versions. Jon-o Addleman (Jul 20)
  - Re: "Code Red" worm - there MUST be at least two versions. Ryan Russell (Jul 20)
- <Possible follow-ups>
- Re: "Code Red" worm - there MUST be at least two versions. Adam (Jul 20)
- RE: "Code Red" worm - there MUST be at least two versions. Kuo, Jimmy (Jul 20)