my iis 4 server logs are showing these:
[ip address] GET /scripts/..%5c../winnt/system32/cmd.exe followed by 200, 404, or 500, depending on the server.
I have applied the patches and the April 10 rollup package as well as Norton Corporate is running. No trace of Code Red or Nimda.
My question is, what do the codes mean? example, I read that code 200 is a successful request. I’m guessing 404 is ‘not found’, but what’s 500?
these servers are within our WAN that is ‘protected’ by a PIX. however, I think the pix must do some translating for us so our internal web servers can be exposed to the internet.
anyway, any light you can shed would be great.