Re: Code Red II Alert

Date view Thread view Subject view Author view

From: Aron Roberts (aron@socrates.berkeley.edu)
Date: Mon Aug 06 2001 - 16:32:41 PDT

Hi Pete,

In the message "Re: [Micronet] Code Red II Alert", dated 2001-08-06,
Pete Goodeve wrote:

>Our (Apache) httpd server is busy collecting hits from lots of
>machines -- many of them on campus. Is there anyone interested
>in these logs or is everyone already too swamped?

   A short time ago, Sherry Rogers asked that any Web server log
information that may help identify other campus Web servers (running
Microsoft's IIS) that might have been infected by the Code Red and
Code Red II worms should be sent to the following mailing list:

    ucb-security@uclink.berkeley.edu

   Several campus Webmasters have already posted lists of potentially
infected hosts to that mailing list today. (More information about
the 'ucb-security' list appears below.)

   More generally, if you (or any other Micronet'ters) should ever be
uncertain about where to send reports of security problems, you --
and they -- can always follow the advice given on the campus's System
and Network Security Office's Web site
<http://socrates.berkeley.edu:2002/>, which states that:

     "To report security incidents involving campus computing system
      and network resources send email to: security@berkeley.edu"

   Thanks for volunteering to share this information! It may well
prove helpful in identifying -- and thus repairing -- additional
campus servers infected by this worm.

Aron Roberts
Workstation Software Support Group 

--

... the ucb-security mailing list ... is for the discussion
of computer and network security topics on all major platforms.  It
can also be used to report security incidents if it is deemed that the
campus would benefit from the information.  For incidents which should
not (yet) be made public to the rest of campus, please send mail to
<security@berkeley.edu>.

Subscription to this list is restricted to UCB (and some LBL) affiliates.

To subscribe to this list, send an e-mail message with just the 
following text in its body (i.e. not its Subject: line) to: 
majordomo@listlink.berkeley.edu

	subscribe ucb-security

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, its meetings and events, and its
mailing list, including information on subscribing and unsubscribing,
see the Micronet Web site at <http://wss.berkeley.edu/micronet/>.

Date view Thread view Subject view Author view

This archive was generated by hypermail 2b29 : Mon Aug 06 2001 - 16:43:32 PDT