RE: [cobalt-security] Re: Code Red Special Effects (WAS: Hacking my Raq4i???)

["Simon Wilson" <simon@xxxxxxxxxxxxx>]

SNIP
2.  However:
     a)  if you have Frontpage extensions or the ChiliSoft! extensions
installed, you are running ISAPI filters and there is discussion in the vuln
groups that these will be susceptible to the newer variants and mutations of
Code Red.  Remove and disallow ALL FrontPage extensions.
SNIP

I read above and am now a bit concerned. We are running ChiliSoft!
extensions but not Frontpage does this mean we are still vulnerable?
I would look at the discussion in 'the vuln groups' but I don't know what or
where they are.
One other quick question our IP address starts 212.78. most attacks on us
also start 212.78. does this mean they are on the same farm as us or is
there some other reason? spoofing?

Thanks
Simon



_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security