p2p.wrox.com Forums

Need to download code?

View our list of code downloads.


  Return to Index  

proasp_howto thread: Re: +AFs-proasp+AF8-howto+AF0- RE: default.ida


Message #1 by "Mark Strangways" <strangconst@h...> on Mon, 6 Aug 2001 11:15:17 -0400
If you have a URL it would be nice to publish it +ACE-
I think the new version code red worm is targeting the default.ida file.
I have been told, unnamed sources with-in MS, that this file and default.idq
and .htw are part of the index server.

    to remove open web MMC open web site ,right click to properties,
    Home directory, configuration.

    you should then see a list of Mappings, remove the above extension from
here.

http://www.microsoft.com/technet/treeview/default.asp?url+AD0-/TechNet/prodtechn
ol/iis/tips/iis5chk.asp
this link will take you to a tech net article. Worth reading.
http://www.microsoft.com/technet/treeview/default.asp?url+AD0-/TechNet/security/
bulletin/ms01-033.asp
Uncheck buffer overflow in index server.

Hope that shed's a bit more light on it.

Mark


----- Original Message -----
From: +ACI-David Cameron+ACI- +ADw-dcameron+AEA-itis-now.com+AD4-
To: +ACI-Pro ASP HowTo+ACI- +ADw-proasp+AF8-howto+AEA-p2p.wrox.com+AD4-
Sent: Sunday, August 05, 2001 6:59 PM
Subject: +AFs-proasp+AF8-howto+AF0- RE: default.ida


+AD4-
+AD4- Go to the MS site and read the bulletin. All will be revealed.
+AD4-
+AD4- regards
+AD4- David Cameron
+AD4- nOw.b2b
+AD4- dcameron+AEA-itis-now.com
+AD4-
+AD4- -----Original Message-----
+AD4- From: srikieat +AFs-mailto:srikieat+AEA-yahoo.com+AF0-
+AD4- Sent: Friday, 3 August 2001 1:39 PM
+AD4- To: Pro ASP HowTo
+AD4- Subject: +AFs-proasp+AF8-howto+AF0- RE: default.ida
+AD4-
+AD4-
+AD4- Yes, i see this in logfile in my IIS. This script try to overflow buffer.
I
+AD4- have
+AD4- some question in my mind. If the buffer is overflow , what is
happening....
+AD4- Please help me
+AD4-
+AD4- Thanks in advance
+AD4-
+AD4-
+AD4- ---

  Return to Index