[thelist] Weird Log Entries -- Any Ideas?

Erik Mattheis gozz at gozz.com
Tue Jun 26 14:26:48 CDT 2001


>http://www.practicalcomponents.com/scripts/..�¯../winnt/system32/cmd.e
>xe?/
>c+dir c:
>http://www.practicalcomponents.com/scripts/..À¯../winnt/system32/cmd.exe
>?/c+

This looks like the Sadmind/IIS worm:
http://www.cert.org/advisories/CA-2001-11.html

If it is there's nothing to worry about if your server has recent 
security patches on it ... it exploits well-known vulnerabilities.

-- 

- Erik Mattheis

Weaning self off M$.
Learning Linux,.
Waiting for OS X apps.

(612) 827 3963





More information about the thelist mailing list