Re: [Snort-sigs] WebDAV nessus script?

From: Frank Knobbe <fknobbe(at)knobbeits.com>
Date: Tue Mar 18 2003 - 18:11:29 EST

On Tue, 2003-03-18 at 16:30, Michael Scheidell wrote:

> Funny thing, when we looked at what else those ip addresses did, they ONLY
> did a 'HEAD /security' then a 'LINK /security'

hmmmm... I wasn't aware LINK was a valid request. I haven't check the RFC, but it doesn't appear in httpext.dll in IIS. So even if it is a valid method (which I doubt), IIS doesn't seem to support it.

Perhaps someone just probing for an error response?

Frank

---

This SF.net email is sponsored by: Does your code think in ink? You could win a Tablet PC. Get a free Tablet PC hat just for playing. What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigsReceived on Tue Mar 18 18:46:24 2003