RE: [cobalt-users] Red WORM What a day?

["Joe Seitzer" <joe@xxxxxxxxxxx>]

> My server also shows 63 attempts. Is there any vulnerability to my RaQ
or
> does this worm only attack Windows based systems.

You are safe with the RaQ, this worm only attacks the Index Server and
Indexing Service ISAPI Extension that come with M$ IIS by creating a
Buffer overflow.  

To read more go to 

http://www.securityfocus.com/bid/2880

or just look at www.securityfocus.com and they have a couple of write
up's.

> People,
> 
> Last time is was missed completely -
> 
> This time I am being pounded - all different IP's
> 
> [admin@www admin]$ cat /var/log/httpd/access | grep default.ida | wc
-l
>      66

I'm up to 103 and still going. 

Joe Seitzer
www.pkicentral.net