General discussion
June 20, 2002 at 03:32 AM
techserf

IIS LOGS

by techserf . Updated 21 years, 11 months ago

my iis 4 server logs are showing these:

[ip address] GET /scripts/..%5c../winnt/system32/cmd.exe followed by 200, 404, or 500, depending on the server.

I have applied the patches and the April 10 rollup package as well as Norton Corporate is running. No trace of Code Red or Nimda.

My question is, what do the codes mean? example, I read that code 200 is a successful request. I’m guessing 404 is ‘not found’, but what’s 500?

these servers are within our WAN that is ‘protected’ by a PIX. however, I think the pix must do some translating for us so our internal web servers can be exposed to the internet.

anyway, any light you can shed would be great.

This discussion is locked

All Comments