code red and DOS!

[mosad2]

hi guys
i am asking for an explanation about code red virus (as my firewall calls)
and denial of service attacks?
i know a little about DOS attacks but i searched for code red but found nothing useful!
cheerz
and peace out

[MrLinus]

Code Red (and it's siblings Code Red II, Code Red III) are worms that affect IIS 4/5 servers. They propogate by finding other 'vulnerable' servers. Further info is at:

http://www.cert.org/advisories/CA-2001-19.html

http://www.cert.org/incident_notes/IN-2001-09.html

A DoS (Denial of Service) is when an attacker floods a service or overwhelms a service with packets. DoSes come both in local forms, as a resource starvation effect (e.g., using up CPU cycles to 100%, using all RAM, using all disk space) and/or a remote form (e.g., ping of death is too many pings being sent for an OS to handle). Often these attacks result in a server/service not being available until the attack subsides.

[mosad2]

thank u msmittens
about DOS attacks
where can i find the way it attacks servers or is this illegal?!
thank u m8

[MrLinus]

It depends on the DoS type. There are really 3 DoS types: simple DoS, DDoS (Distributed DoS), and DRDoS (Distributive Reflective DoS).

Some DoSes use malformed ICMP packets. Others use malformed SYN packets. It depends on the attack.

Now, if you want to see the actual code, find the name of the DoS (e.g., Smurf, Jolt, etc.) and do a search on Google. There are quite a few excellent reports on what these attacks did and how they work. Some are used today (like in my classroom against my students.. ) but we haven't seen them as much as previously.

[mosad2]

Originally posted here by MsMittens
. Some are used today (like in my classroom against my students.. )

[robo3245]

this is a good code red site

http://securityresponse.symantec.com...codered.f.html

[SirDice]

One of the best analysis IMO can be found on eeye's site.

[Warning. Knowledge of assembly required]

Code Red
Code Red II

[shadow_dancer]

Code Red II, the self-propagating Internet worm, is slowly working its way around the United States, causing sporadic outages and running up an immense tab in its wake.

click here the full stiry.