[Xitami] Nimda gets a 200?

[Michael]

I wrote the group 3 days ago about this but no response.  When I plug 
in the complete url you provide I can view the source of your root htm 
file, same thing as going to just your ip.   

I'd experiment with this but my provider is pulling the plug today on 
anyone infected.  Not sure if they are smart enough to realize I'm testing.

~Michael


On 21 Sep 2001, at 12:50, Soulkoff wrote:

> This gives a 404:
> http://24.12.24.86/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir
> 
> 
> This gives a 200!?:
> http://24.12.24.86/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir
> 
> Do you know what this means?
> 
> I know it's a worm, but why does the one get a 200?  I'm a bit worried....
> 
> ~Matthias
> 
> 
> 
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami