Security Incidents mailing list archives
Unknown requests from IE 5
From: David Ward <dward () maidencreek com>
Date: Mon, 22 Oct 2001 15:20:58 -0700
We seem to have been receiving a number of HTTP requests similar to the following lately:
168.10.36.63 - - [22/Oct/2001:14:07:59 -0700] "GET /_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0" 200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)"
168.10.36.63 - - [22/Oct/2001:14:08:00 -0700] "GET /MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0" 200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)"
Does anyone know what these requests are looking for? I am assuming that they are harmless requests from IE 5 assuming that it is talking to an IIS or exchange server, but I cannot find anything that mentions what these files actually are.
Dave dward () maidencreek com -- ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service.For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Unknown requests from IE 5 David Ward (Oct 22)
- <Possible follow-ups>
- RE: Unknown requests from IE 5 Tom Gallagher (Oct 23)