[Xitami] CodeRed solution...

[Thomas J. Hruska]

>From what I can tell, most people now have CodeRed II (my log files for the
past 24 hours only show CodeRed II).  So, here is what we can do to help
the poor souls out :)

Write a PHP script called default.ida.  Now, instead of replying with an
e-mail (as someone suggested), make the script take advantage of the fact
that cmd.exe is now in an executable location on the remote server (as
root.exe).  So, what the script should do is execute root.exe to launch FTP
to go and download the patch from Microsoft.  Then, use root.exe to FTP
down a macro script from your sever (to simulate keypresses).  Then run the
macro script on the remote server using root.exe one last time to execute
the macro script which will install the patch (the macro script should also
remove root.exe as well as reboot the machine when it's done).  Thus, we
can effectively remove CodeRed II on the remote server and patch IIS at the
same time...Microsoft never made fixes this simple :)


           Thomas J. Hruska -- shinelight@crosswinds.net
Shining Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/