I just tacked on:

AddHandler cgi-script .ida

into the httpd.conf file.. that way apache executes it.

Eric

Technomage writes:

> ok,
> I've gotten a default.ida in place. and I think I have
> the apache.mimetypes file edited with the following:
> application/x-perl	ida pl
> 
> not sure if that will work, but it should. someone please 
> correct me if I am out in left field here?
> 
> Eric Barendt wrote:
> > 
> > Maybe so... but did you guys see slashdot today?  There's a link on there
> > that will give you some code that will use the exploit to fix the server
> > that attacked you.  There's a default.ida file you can stick on your apache
> > server, associate it with as a cgi-script, and it will use the remote
> > exploit to stop iis and reboot the server.
> > 
> > If you're not running a code-red infected box, or going thru a code-red
> > infected proxy, you should see plain text and your box (or proxy) won't get
> > rebooted :)... http://www.dasbistro.com/default.ida
> > 
> > Eric
> > 
> > Craig White writes:
> > 
> > > default.ida is reference for MS Indexing Services - the code will cause the
> > > services to break.
> > >
> > > Redirection is a waste of bandwidth - forget it.
> > >
> > > Craig
> > >
> > > > -----Original Message-----
> > > > From: plug-discuss-admin@lists.plug.phoenix.az.us
> > > > [mailto:plug-discuss-admin@lists.plug.phoenix.az.us]On Behalf Of William
> > > > Lindley
> > > > Sent: Saturday, August 11, 2001 6:31 AM
> > > > To: plug-discuss@lists.plug.phoenix.az.us
> > > > Subject: Re: format of default.ida file?
> > > >
> > > >
> > > > What is default.ida anyway?
> > > >
> > > > And how exactly does one redirect a page as suggested earlier?  My website
> > > > is hosted on pair.net, not on my (dialup) box.
> > > >
> > > > \\/
> > > >
> > > > ________________________________________________
> > > > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail
> > > > doesn't post to the list quickly and you use Netscape to write mail.
> > > >
> > > > PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> > > > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> > > >
> > >
> > > ________________________________________________
> > > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> > >
> > > PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> > > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> > ________________________________________________
> > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> > 
> > PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> 
> -- 
> I will not be pushed, filed, stamped, indexed, briefed, debriefed, or
> numbered!
> My life is my own - No. 6
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> 
> PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss