[Dshield] Anyone know what this is?

John Hardin johnh at aproposretail.com
Tue Aug 28 04:08:35 GMT 2001


On Tue, 28 Aug 2001, Gary Benson wrote:

> 64.225.196.160 - - [26/Aug/2001:21:10:03 +0100] "GET /NULL.printer HTTP/1.0" 404 206 -

The .printer extension DLL has a BO bug. It's probably somebody checking
to see if you're a vulnerable IIS server. Maybe there's a worm (or other
exploit) attached to it.

--
John Hardin                                   <johnh at aproposretail.com>
Internal Systems Administrator                    voice: (425) 672-1304
Apropos Retail Management Systems, Inc.             fax: (425) 672-0192




More information about the list mailing list