RE: Odd IIS log entries

From: James C. Slora, Jr. <Jim.Slora(at)phra.com>
Date: Wed Apr 30 2003 - 09:28:08 EDT

Jacob Hahn wrote Monday, April 28, 2003 1:27 PM

> The following is an IIS log entry, does anyone know if this is a known
<snip>
>  - 404

This looks like a common attempted WebDAV exploit of ntdll.dll, and appears to have been unsuccessful. http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS03-007.asp

http://www.stanford.edu/group/itss-ccs/security/IIS-WebDAV.html

---

Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the world's premier event for IT and network security experts. The two-day Training features 6 hand-on courses on May 12-13 taught by professionals. The two-day Briefings on May 14-15 features 24 top speakers with no vendor sales pitches. Deadline for the best rates is April 25. Register today to ensure your place. http://www.securityfocus.com/BlackHat-incidents

---

Received on Wed Apr 30 13:16:44 2003