LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L
Options: Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Parts/Attachments: text/plain (24 lines)
Print Reply
Sender:
LISTSERV give-and-take forum <[log in to unmask]>
Date:
Tue, 4 Sep 2012 09:05:39 -0300
Reply-To:
LISTSERV give-and-take forum <[log in to unmask]>
Message-ID:
<[log in to unmask]>
Subject:
Log Entry
MIME-Version:
1.0
Content-Transfer-Encoding:
7bit
Content-Type:
text/plain; charset=ISO-8859-1; format=flowed
From:
Tolliver <[log in to unmask]>
Comments:
To: [log in to unmask]
 
Hello,

This is what was in my log this morning.

I checked the access log and It is in there.

Here it is:
  "POST
/?-d%20allow_url_include%3DOn+-d%20auto_prepend_file%3D../../../../../../../../../../../../etc/passwd%00%20-n/?-d%20allow_url_include%3DOn+-d%20auto_prepend_file%3D../../../../../../../../../../../../etc/passwd%00%20-n
HTTP/1.1" 302 503 "-" "Mozilla/5.0"


Is there a way of determining if the Server has been compromised?


Thanks.

############################

To unsubscribe from the LSTSRV-L list:
write to: mailto:[log in to unmask]
or click the following link:
http://peach.ease.lsoft.com/scripts/wa-PEACH.exe?SUBED1=LSTSRV-L&A=1

ATOM RSS1 RSS2