No subject


Thu Nov 23 16:36:19 EST 2017


-G

---------- Forwarded message ----------
Date: Tue, 18 Sep 2001 15:42:48 +0100
Reply-To: list at ...3482...
To: list at ...3482...
Subject: Re: New worm going 'round?

> > If I tail -f httpd-error.log these errors are going by faster than I can
> > read! omg!
>
> Same here, the signature requests appear to be
>
> GET /MSADC/root.exe?/c+dir HTTP/1.0
> GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0
[...]

Looking more and more like code blue.

http://www.securityfocus.com/frames/?content=/vdb/bottom.html%3Fsection%3Dexploit%26vid%3D1806






More information about the Snort-users mailing list