Re: Strange CONNECT entries in apache logs

From: Christine Kronberg (Christine_Kronbergat_private)
Date: Thu Jun 12 2003 - 02:15:03 PDT

  • Next message: riceat_private: "File on desktop called "~""

    On Tue, 10 Jun 2003, OSCAR wrote:
    
    >
    > If 200 is a successful connection, do these lines mean i am in
    > trouble?...
    
      Probably not. Let me guess: Your straing page has a size of 2347
      bytes? Did you try by hand to see the results?
    
    
    > 21.10.41.230 0 - - [07/Jun/2003:09:32:16 -0500] "GET
    > /index.php?page=../../../../../../../../../../../../../../../etc/passwd
    > HTTP/1.1" 200 38508
    
      38508 bytes transferred? What does your server send?
    
      Cheers,
    
    
                                                        Chris Kronberg.
    
    -- 
    GeNUA mbH
    
    
    
    ----------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Thu Jun 12 2003 - 13:22:26 PDT