new www vulnerablity
Hi,
Is anyone aware of a vulnerablity that is characterised by the following
against a www server?
or is the ^E etc just a way of trying to hide the variuos attempts below?
[Sat Apr 6 02:44:07 2002] [error] [client 24.101.140.253] Invalid
method in request ^E^A
[Sat Apr 6 02:44:07 2002] [error] [client 24.101.140.253] Invalid
method in request ^E^A^B
[Sat Apr 6 02:44:08 2002] [error] [client 24.101.140.253] Invalid
method in request ^A
[Sat Apr 6 02:44:09 2002] [error] [client 24.101.140.253] Invalid
method in request ^Z
[Sat Apr 6 02:44:12 2002] [error] [client 24.101.140.253] File does not
exist: /mnt/bigone/www/html/www.teilo.net/invalidfilename.htm
[Sat Apr 6 02:44:12 2002] [error] [client 24.101.140.253] Options
ExecCGI is off in this directory:
/mnt/bigone/www/html/www.teilo.net/invalidfilename.cgi
[Sat Apr 6 02:44:13 2002] [error] [client 24.101.140.253] Invalid URI
in request GET /../invalidfilename.htm HTTP/1.0
[Sat Apr 6 02:44:13 2002] [error] [client 24.101.140.253] File does not
exist: /mnt/bigone/www/html/www.teilo.net/invalidfilename.htm
[Sat Apr 6 02:44:14 2002] [error] [client 24.101.140.253] Options
ExecCGI is off in this directory:
/mnt/bigone/www/html/www.teilo.net/invalidfilename.cgi
[Sat Apr 6 02:44:14 2002] [error] [client 24.101.140.253] Invalid URI
in request GET /../invalidfilename.htm HTTP/1.0
[Sat Apr 6 02:44:15 2002] [error] [client 24.101.140.253] File does not
exist: /mnt/bigone/www/html/www.teilo.net/..À¯../..À¯../sensepost.exe
[Sat Apr 6 02:44:15 2002] [error] [client 24.101.140.253] File does not
exist: /mnt/bigone/www/html/www.teilo.net/..À¯../..À¯../sensepost.exe
[Sat Apr 6 02:44:16 2002] [error] [client 24.101.140.253] File does not
exist: /mnt/bigone/www/html/www.teilo.net/..À¯../..À¯../cmd1.exe
Regards,
/James
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: