[Xitami] Code Red requests

[Craig Morrison]

Yes, Xitami shows the full HTTP GET request that allows the attacker to gain
access to an unpatched IIS (4,5) system.

No, it is not. The request just sets up the vulnerable system to allow access
by the attacker.

(176 requests in 8 hours today.)

John Poltorak wrote:
> 
> Does Xitami show the complete Code Red request in the ACCESS.LOG made by
> infected systems?
> 
> And if so, is that the full extent of the worm?

-- 

Craig Morrison
  MTS Professional @ http://www.2cah.com/
  A Win32 Email server that works for _you_.
EzMTS - A _free_ Win32 EMail Server
  http://www.ezmts.org/
  Anonymous FTP at ftp://ftp.ezmts.org