[users@httpd] Hack?

2011-12-13 Thread Knute Johnson
This showed up in my log today on a Ubuntu server with Apache 2.2.17. A total of 3 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that indicate a possible exploit): /?file=../../../../../../proc/self/environ%00

Re: [users@httpd] Hack?

2011-12-13 Thread Igor Cicimov
Did you try it yourself? On Dec 14, 2011 1:50 PM, Knute Johnson apa...@knutejohnson.com wrote: This showed up in my log today on a Ubuntu server with Apache 2.2.17. A total of 3 possible successful probes were detected (the following URLs contain strings that match one or more of a listing

Re: [users@httpd] Hack?

2011-12-13 Thread Yehuda Katz
On Tue, Dec 13, 2011 at 9:50 PM, Knute Johnson apa...@knutejohnson.comwrote: This showed up in my log today on a Ubuntu server with Apache 2.2.17. A total of 3 possible successful probes were detected (the following URLs contain strings that match one or more of a listing of strings that

Re: [users@httpd] Hack?

2011-12-13 Thread Knute Johnson
On 12/13/2011 7:12 PM, Yehuda Katz wrote: On Tue, Dec 13, 2011 at 9:50 PM, Knute Johnson apa...@knutejohnson.com mailto:apa...@knutejohnson.com wrote: This showed up in my log today on a Ubuntu server with Apache 2.2.17. A total of 3 possible successful probes were detected (the

Re: [users@httpd] Hack?

2011-12-13 Thread Yehuda Katz
On Tue, Dec 13, 2011 at 10:33 PM, Knute Johnson apa...@knutejohnson.comwrote: On 12/13/2011 7:12 PM, Yehuda Katz wrote: On Tue, Dec 13, 2011 at 9:50 PM, Knute Johnson apa...@knutejohnson.com mailto:apache@knutejohnson.**com apa...@knutejohnson.com wrote: This showed up in my log today on

Re: [users@httpd] Hack?

2011-12-13 Thread Knute Johnson
On 12/13/2011 7:57 PM, Yehuda Katz wrote: On Tue, Dec 13, 2011 at 10:33 PM, Knute Johnson apa...@knutejohnson.com mailto:apa...@knutejohnson.com wrote: On 12/13/2011 7:12 PM, Yehuda Katz wrote: On Tue, Dec 13, 2011 at 9:50 PM, Knute Johnson apa...@knutejohnson.com