Return-Path: Delivered-To: apmail-jakarta-tomcat-user-archive@jakarta.apache.org Received: (qmail 38614 invoked by uid 500); 3 Aug 2001 06:41:50 -0000 Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk Reply-To: tomcat-user@jakarta.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 38607 invoked from network); 3 Aug 2001 06:41:50 -0000 Received: from brev.stud.ntnu.no (postfix@129.241.56.70) by h31.sny.collab.net with SMTP; 3 Aug 2001 06:41:50 -0000 Received: from localhost (localhost [127.0.0.1]) by brev.stud.ntnu.no (Postfix) with ESMTP id 989E282BE for ; Fri, 3 Aug 2001 08:41:55 +0200 (CEST) Received: from jeeves.stud.ntnu.no (jeeves [129.241.56.14]) by brev.stud.ntnu.no (Postfix) with ESMTP id 05C7482BB for ; Fri, 3 Aug 2001 08:41:55 +0200 (CEST) Received: from localhost (endrs@localhost) by jeeves.stud.ntnu.no (8.10.0.Beta12/8.10.0.Beta12) with ESMTP id f736fse04149 for ; Fri, 3 Aug 2001 08:41:54 +0200 (MEST) X-Authentication-Warning: jeeves.stud.ntnu.no: endrs owned process doing -bs Date: Fri, 3 Aug 2001 08:41:54 +0200 (MEST) From: =?iso-8859-1?Q?Endre_St=F8lsvik?= X-X-Sender: To: Subject: Re: Code Red Worm virus In-Reply-To: Message-ID: X-My-Opinion: War and bombs are bad. Peace and flowers are good. ;-D MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: by AMaViS perl-10 X-Spam-Rating: h31.sny.collab.net 1.6.2 0/1000/N On Thu, 2 Aug 2001, David Domenico wrote: | I am running Tomcat 3.2.1 standalone for development purposes, as a web | server using port 80. Yesterday I noticed the message, see below, on my | Tomcat console window. This is identified as the "Code Red" virus as noted | in the http://www.cert.org/advisories/CA-2001-19.html. The advisory states | that the system may not have been compromised, but I am still concerned. | | I notified our network administrator and he applied the neccessary patchs | from MS. However I am not running IIS. Does anyone know of a problem with | Tomcat and the code red virus? I will download the latest release build, | Tomcat 3.2.3. and install it. It's a "binary virus", affects ONLY IIS. All binary viruses works like this, they are highly targeted towars one specific platform. Java is a totally different platform, and won't get affected by IIS' i386 "binary viruses".. -- Mvh, Endre