Pope Code Red I

Encyclical

"Rubrum Codicis". Found by eEye and named after the soda the researchers were drinking that night, the hole in IIS's .ida handler became the Code Red worm a month later, infecting about 359,000 servers in 14 hours on 19 July. Together with Nimda it moved Microsoft to write its Trustworthy Computing memo in January 2002. It was the year the world learned that an available patch is not an installed patch.

Saint page: Saint Code Red's .ida

Cardinals

BIND 8 TSIG buffer overflow (Lion worm) · IE incorrect MIME header auto-execution (MS01-020, Nimda/Klez)