OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Mike Shaw (mshawwwisp.com)
Date: Mon Nov 12 2001 - 12:03:06 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Any further info on system configurations? ISAPI mappings, installed
    software (perl, cold fusion...), running services?

    -Mike

    At 12:27 PM 11/12/2001 -0500, Keith.Morgan wrote:
    >The focus-ms list is hopping a little regarding some strange behaviour from
    >IIS.
    >
    >The symptoms:
    >IIS continues to run (or sometimes crashes), but the common thread is that
    >the port is closed.
    >
    >After recieving a report on focus-ms, and having this same behaviour occur
    >on one of our webservers, I contacted a friend who runs a (logically) nearby
    >network. He indicated that the same problem had occurred on some of thier
    >servers.
    >
    >I'm currently pouring over logs attempting to locate anything out of the
    >ordinary.
    >
    >Just a note for all those that will say "make sure you've applied patches or
    >run the hfnetchk:" Our servers are at completely current patch levels.
    >
    >
    >Keith T. Morgan
    >Chief of Information Security
    >Terradon Communications
    >keith.morganterradon.com
    >304-755-8291 x142
    >
    >
    >----------------------------------------------------------------------------
    >This list is provided by the SecurityFocus ARIS analyzer service.
    >For more information on this free incident handling, management
    >and tracking system please see: http://aris.securityfocus.com

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com