[svlug] Is this a hack attempt?

Marc MERLIN marc_news at merlins.org
Fri Oct 25 16:16:48 PDT 2002


On Fri, Oct 25, 2002 at 03:45:28PM -0700, Daevid Vincent wrote:
> I run RH8.0 so this sure seems suspicious to me:
> 
> 1-0 25065 0/508/508 _  6.42 128 0 0.0 130.31 130.31  12.237.249.145
> daevid.com GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0

Did they write any clever code on your machine?

If not, that was not a hack.
http://www.tuxedo.org/~esr/jargon/html/entry/hack.html

Marc
-- 
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/   |   Finger marc_f at merlins.org for PGP key



More information about the svlug mailing list