How will I know?

[Guest_imported]

Well, I have tons of these boogers hanging in my access logs...
65.24.24.125 - - [01/May/2002:13:04:31 -0500] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 5586

How will I know if they find a way to hack into my cmd.exe? I see tons of 404's and 400's, but what does a successfull connection look like?

 

[Wullie]

Hi mate,

If you are running apache, then there is no threat..

Also, a successful connection to any file would not generate an error..

These vulnerabilites only affect IIS machines..

Hope this helps Wullie

http://www.freshlookdesign.co.uk

http://www.searchit-now.co.uk

http://www.survivorhelp.co.uk