[Xitami] Hello World
John Jonas
xitami@lists.xitami.org
Tue, 25 Sep 2001 16:31:16 -0500
"! Bienfeo !" wrote:
>
> Although I more or less understand stand what's happening I have a few
> questions. Like about the fact that I don't have a "/scripts/" directory
> and still I got a 200 response. (a few months ago I watched code red return
> 404 over and over and over again) I can't even find a directory on the
> entire local disk where I keep Xitami named "scripts" Anyway I've turned
> off my sever for now. I'm running Win2000pro. I have never installed IIS or
> FrontPage, but I use IE 5.
The reason Xitami servers are not being infected is that Xitami does not have the "/scripts/" and other
items that Nimda is trying to exploit. It is looking to use items made available by IIS and Xitami just
doesn't have them (thank God). Error messages will automatically be generated for these requests and
recorded in the errors.log file, but other than log file size and slightly redeuced bandwidth (incoming
requests and outgoing error messages) nothing real serious is happening to Xitami sites.
No one has reported here a reason to turn off an Xitami server because of this worm.