01:07:46 XX.XX.XX.XX GET /default.ida 200 HELP!!

From: Mick (mick2767@hotmail.com)
Date: 03/19/03 

From: "Mick" <mick2767@hotmail.com>
Date: Wed, 19 Mar 2003 07:16:32 -0800

01:07:46 XX.XX.XX.XX GET /default.ida 200

I'm seeing some successful gets for default.ida on an NT
4.0 server running Exchange 5.5 and IIS 4.0 from weird IP
addresses. It has the latest IIS roll up patch. Can I
remove the IIS virtual directory mappings to default.ida?
Are they needed for anything like OWA? Any thoughts would
be helpful.

mick2767@hotmail.com

Relevant Pages

  • Logging mechanism in IIS (was RE: code red---- on system that is already (and has been) patched)
    ... Logging is one of the last steps IIS takes while processing a request. ... in itself prove the success or failure of the attack. ... On the other hand, successful attacks from Nimda, Code Red, Sadmind, etc. ... As your customer might already know, just installing patches does not by ...
    (Focus-Microsoft)
  • Re: default.ida
    ... > firewall is probably stopping the attack. ... Note that an IIS buffer overflow like the Index Server exploit probably ... may not have been successful, ... More information on IIS log error messages and Code Red: ...
    (microsoft.public.inetserver.iis.security)
  • RE: Logging mechanism in IIS (was RE: code red---- on system that is already (and has been) patched)
    ... I do not know if this is distributed beyond the Microsoft Course on IIS ... traversal to get to cmd.exe) a successful attack should result in ... as it normally represents the successful execution of the ... As your customer might already know, just installing patches does not ...
    (Focus-Microsoft)
  • OWA : Failed to get Inbox - just one user
    ... Server and IIS 5 ... We've recently moved to this configuration when our NT web ... have been successful with the move except this one: ... IIS username: JohnSmith + password ...
    (microsoft.public.exchange.applications)
  • Outlook Web Access is broken
    ... I have been using IIS to set up an ftp site and was successful. ... something that has made by outlook web access stop working. ...
    (microsoft.public.inetserver.iis)
Quantcast