OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Russell Fulton (R.FULTONauckland.ac.nz)
Date: Thu Jan 31 2002 - 21:05:17 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Fri, 2002-02-01 at 10:30, Russell Fulton wrote:

    >
    > Hmmm.... we saw an attack two days ago against an apache server which
    > consisted of GETs and POST followed by long strings of Xs followed by shell
    > code.

    I have just got the logs from the admin and I find I lied, no shell code
    was logged by apache, just the long string of 'X'S (about 8186 of them).
    So either there was no shell code or apache truncated the string when it
    logged it.

    Apologies for the confusion. 

    -- 
Russell Fulton, Computer and Network Security Officer
The University of Auckland,  New Zealand

    ----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com