[Xitami] CodeRed solution...

John Poltorak xitami@lists.xitami.org
Fri, 10 Aug 2001 09:31:48 +0100


On Fri, Aug 10, 2001 at 02:55:49AM -0500, Thomas J. Hruska wrote:
> From what I can tell, most people now have CodeRed II (my log files for the
> past 24 hours only show CodeRed II).  So, here is what we can do to help
> the poor souls out :)
> 
> Write a PHP script called default.ida.  Now, instead of replying with an
> e-mail (as someone suggested), make the script take advantage of the fact
> that cmd.exe is now in an executable location on the remote server (as
> root.exe).  So, what the script should do is execute root.exe to launch FTP
> to go and download the patch from Microsoft.  Then, use root.exe to FTP
> down a macro script from your sever (to simulate keypresses).  Then run the
> macro script on the remote server using root.exe one last time to execute
> the macro script which will install the patch (the macro script should also
> remove root.exe as well as reboot the machine when it's done).  Thus, we
> can effectively remove CodeRed II on the remote server and patch IIS at the
> same time...Microsoft never made fixes this simple :)

I wouldn't know how to do any of this. 

How about providing a sample?
 
> 
>            Thomas J. Hruska -- shinelight@crosswinds.net
> Shining Light Productions -- "Meeting the needs of fellow programmers"
>                   http://www.shininglightpro.com/
> 


-- 
John