Re: possible?

From: Enkhyl (enkhyl@pobox.com)
Date: 07/21/01


Date: Sat, 21 Jul 2001 14:04:47 -0700
From: Enkhyl <enkhyl@pobox.com>
To: nathan@salvation.unixgeeks.com

On Sat, Jul 21, 2001 at 08:49:42PM -0000, nathan@salvation.unixgeeks.com wrote:

[snip]
> this same exact get request came from several different address as well. such
> as: 128.138.105.172, 202.157.154.126, and a couple of others. any ideas? any
> remote exploits in apache i've missed? i'm running Apache/1.3.19 Server..

This is from the Code Red worm. Take a look at the
threads on Bugtraq and/or Nanog lists.

-- 
Christopher Nielsen - Metal-wielding pyro techie
cnielsen@pobox.com
"Any technology indistinguishable from magic is 
insufficiently advanced." --unknown
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message


Relevant Pages

  • Re: Cant "DidTheyReadIt" be stopped?
    ... but I think that ZA Pro is able to block by remote IP address. ... and the server will log the IP address of the source of the request. ... except by either firewall blocking the site hosting the ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Cant "DidTheyReadIt" be stopped?
    ... but I think that ZA Pro is able to block by remote IP address. ... and the server will log the IP address of the source of the request. ... except by either firewall blocking the site hosting the ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • [TOOL] Blowchunks - Protecting Existing Apache Servers Until Upgrades Arrive
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... a known vulnerable apache server until they can ... on HTTP "request" messages. ... Attached are a two versions of code to allow the server to intercept each ...
    (Securiteam)
  • [UNIX] Apache HTTP Server 413 Error Page XSS
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Apache HTTP Server 413 Error Page XSS ... Apache 2.X returns a '413 Request Entity Too Large' error, ...
    (Securiteam)
  • Re: My web server is being redirected (more info)
    ... >> I host my friends site on my home server. ... >> It appears that Apache2 is redirecting the request to the loopback ... # We now support multiple apache configurations on the same server. ... # Format: Redirect old-URI new-URL ...
    (comp.os.linux.networking)