[Xitami] CodeRed solution...
John Poltorak
xitami@lists.xitami.org
Fri, 10 Aug 2001 09:31:48 +0100
On Fri, Aug 10, 2001 at 02:55:49AM -0500, Thomas J. Hruska wrote:
> From what I can tell, most people now have CodeRed II (my log files for the
> past 24 hours only show CodeRed II). So, here is what we can do to help
> the poor souls out :)
>
> Write a PHP script called default.ida. Now, instead of replying with an
> e-mail (as someone suggested), make the script take advantage of the fact
> that cmd.exe is now in an executable location on the remote server (as
> root.exe). So, what the script should do is execute root.exe to launch FTP
> to go and download the patch from Microsoft. Then, use root.exe to FTP
> down a macro script from your sever (to simulate keypresses). Then run the
> macro script on the remote server using root.exe one last time to execute
> the macro script which will install the patch (the macro script should also
> remove root.exe as well as reboot the machine when it's done). Thus, we
> can effectively remove CodeRed II on the remote server and patch IIS at the
> same time...Microsoft never made fixes this simple :)
I wouldn't know how to do any of this.
How about providing a sample?
>
> Thomas J. Hruska -- shinelight@crosswinds.net
> Shining Light Productions -- "Meeting the needs of fellow programmers"
> http://www.shininglightpro.com/
>
--
John