Re: [cobalt-security] Re: Code Red Special Effects (WAS: Hacking my Raq4i???)

["Kevin D" <kdlists@xxxxxxxxxxxxxxx>]

From: "Michael J. Cannon" <mcannon@xxxxxxxxxxxxxx>
>      a)  if you have Frontpage extensions or the ChiliSoft! extensions
> installed, you are running ISAPI filters and there is discussion in the
vuln
> groups that these will be susceptible to the newer variants and mutations
of
> Code Red.  Remove and disallow ALL FrontPage extensions.

Do you have a source for this? I haven't seen anything about it on Bugtraq
(although it's quite possible I've missed something). Is there an identified
buffer overflow vulnerability in front page extensions for unix?

The two existing Code Red strains and the Code Red II worm cann't
successfully attack linux/unix boxes with front page extensions, just to
reiterate.

Kevin