[21752] in bugtraq
Re: "Code Red" worm - there MUST be at least two versions.
daemon@ATHENA.MIT.EDU (Adam)
Fri Jul 20 18:18:17 2001
Message-Id: <200107202150.f6KLotL22199@supernova.dimensional.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=iso-8859-1
Date: Fri, 20 Jul 2001 15:48:08 -0700 (Mountain Standard Time)
From: Adam <element@Dim.com>
To: donp@aeinnovations.com
Cc: BUGTRAQ@securityfocus.com
Nope. Different worm altogether.
> I wonder if I have seen this variant - a person I emailed has a
>server whose web pages served looks a lot like the Code Red worm's output
>(1 line of simple html) displaying
>
> FUCK CHINA GOVERNENT
> and p0isonb0x (or something like that)
"fuck USA Government"
"fuck PoizonBOx ">
Sadmind worm a few months ago...but they all look the same.
http://www.cert.org/advisories/CA-2001-11.html